widgets-ui
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external component registry at
https://ui.inference.sh/r/widgets.jsonfor installation vianpx shadcn. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to render UI from agent-generated structured data, creating an attack surface. 1. Ingestion points:
WidgetJSON data passed to theWidgetRenderercomponent inSKILL.md. 2. Boundary markers: None present in instructions to distinguish between trusted and untrusted UI definitions. 3. Capability inventory: Support for interactive components including buttons, inputs, and forms with corresponding action handlers. 4. Sanitization: No sanitization or schema validation examples are provided in the skill documentation.
Audit Metadata