chat-ui
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the installation of external code and components through commands like
npx shadcn@latest add https://ui.inference.sh/r/chat.jsonandnpx skills addfor several remote repositories (belt-sh/cli,inference-sh/skills@agent-ui). These patterns integrate external, third-party code into the project environment.- [EXTERNAL_DOWNLOADS]: Fetches component configurations and UI blocks from theui.inference.shdomain and refers to documentation oninference.sh.- [PROMPT_INJECTION]: The skill implements a chat interface that processes user input and assistant messages, which serves as a vector for indirect prompt injection if external data is not sanitized. - Ingestion points: Data enters the system via the
ChatInputcomponent and is rendered in theChatMessagecomponent inSKILL.md. - Boundary markers: The provided usage examples do not include delimiters or instructions to the agent to disregard instructions within the message content.
- Capability inventory: The skill provides UI components and does not include scripts with high-privilege system access or dangerous file operations.
- Sanitization: The implementation snippets do not show explicit sanitization or escaping of the message content before rendering.
Audit Metadata