chat-ui
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to fetch UI components from the official registry at
ui.inference.shusing theshadcnCLI tool. It also suggests installing supplementary agent tools frominference-shandbelt-shvia theskillsCLI. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The
ChatMessagecomponent takes acontentprop, and theChatInputcomponent takes user text viaonSubmit(located inSKILL.md). - Boundary markers: None explicitly defined in the UI code snippets provided.
- Capability inventory: The components are primarily for rendering and handling user interaction within a web application environment.
- Sanitization: The provided documentation focuses on layout and integration; developers must ensure standard React/Markdown sanitization practices are applied when rendering message content.
Audit Metadata