ui-gen
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and focused on teaching the agent how to generate secure code for various UI paradigms (React, HTMX, TUI).
- [SAFE]: Includes explicit security guardrails for cross-site scripting (XSS), recommending the use of framework-level bindings and HTML sanitizers like DOMPurify.
- [SAFE]: Provides supply-chain security guidance by instructing the agent to reject external CDN script tags in favor of local, pinned dependencies.
- [SAFE]: Addresses advanced risks such as ANSI escape sequence injection in terminal-based interfaces (TUI) and authentication bypasses in HTMX partial routes.
- [SAFE]: The listed dependencies (lucide-react, clsx, tailwind-merge, ink, streamlit, gradio) are all well-known, legitimate libraries in their respective ecosystems.
Audit Metadata