commerce-ui-tools
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- Architecture Documentation: The file provides a detailed contract for how AI agents interact with frontend components. It defines clear boundaries between model-authored values and server-side enriched data, ensuring that sensitive values are not directly authored by the model.
- Input Sanitization: The instructions reference specific fencing mechanisms (
sanitize_suggestion_chips) to remove control characters and enforce length constraints on user-facing elements, which is a positive security practice to prevent UI-based attacks. - Data Provenance: The enrichment hook pattern described requires data identifiers to have provenance, which helps prevent the injection of unauthorized or malicious data into the presentation layer.
- No Code Execution: The skill consists of architectural guidance and does not include executable scripts, shell commands, or external dependency installations.
Audit Metadata