elements
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to fetch component source code and styling metadata from the official r.assistant-ui.com registry.
- [COMMAND_EXECUTION]: Provides standard developer instructions for using the
npx assistant-uiandnpx shadcncommand-line tools to initialize and manage project components. - [INDIRECT_PROMPT_INJECTION]: The UI components documented in this skill, such as
Thread,MarkdownText, andToolCall, are designed to ingest and render untrusted data from LLM message streams and external tool outputs. - Ingestion points: Data enters the system via message part streams processed by
Thread.aui,MarkdownText, and specialized reasoning/source renderers. - Boundary markers: The skill utilizes the
AssistantRuntimeProviderand underlying primitives to scope and delimit content within the chat context. - Capability inventory: The components support rendering rich text, markdown, Mermaid diagrams, and interactive tool approval cards.
- Sanitization: Content sanitization is managed by the underlying
@assistant-ui/reactprimitives during the rendering lifecycle to prevent malicious payload execution.
Audit Metadata