ag2-ag-ui
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
ag2package and associated UI extras from standard registries. It also utilizesnpxto bootstrap frontend components and references a project starter repository from the vendor's GitHub organization. - [INDIRECT_PROMPT_INJECTION]: The skill implements a FastAPI endpoint that ingests user-supplied messages and context directly into the agent's processing pipeline.
- Ingestion points: The
messagepayload (typeRunAgentInput) in the/chatPOST endpoint defined in therun_ag_ui.pycode snippet. - Boundary markers: The provided code recipes do not include specific delimiters or prompt-level instructions to ignore embedded commands within user-supplied text.
- Capability inventory: The agent supports streaming text, reasoning events, and server-side tool execution as defined in the
SKILL.mdfeature list. - Sanitization: While the code examples lack explicit sanitization, the skill's production checklist correctly advises users to validate and authorize tool inputs server-side before execution.
Audit Metadata