chat-ui
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches UI component configurations and registry files from the official ui.inference.sh domain, which is a service dedicated to AI infrastructure and components.
- [COMMAND_EXECUTION]: Provides instructions to install the belt-sh CLI and shadcn components using npx; these commands are standard for modern React development workflows.
- [INDIRECT_PROMPT_INJECTION]: The ChatMessage and ChatInput components represent a surface for displaying untrusted data from users and AI agents. However, as frontend components, they do not have direct access to sensitive system operations or autonomous execution capabilities.
Audit Metadata