chat-ui
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a component registry configuration from
https://ui.inference.sh/r/chat.jsonto facilitate UI component installation. - [COMMAND_EXECUTION]: Provides instructions to run
npxcommands for tool installation and component registration, which is standard for theshadcn/uiecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to render chat content from users and AI agents. This represents an attack surface for indirect prompt injection if the underlying rendering components do not provide adequate sanitization of untrusted input.
Audit Metadata