Gen Agent Trust Hub

libraries-dev · jakubantalik/libraries.dev

Passed

Provider summary

The skill facilitates the integration of UI effect libraries from libraries.dev by scanning project files for suggested placements and automating package installation. It presents a low-risk surface for indirect prompt injection because it processes local source code without specific boundary protections, and it involves the installation and execution of external npm packages.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.