agent-ui
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of UI component configurations and registry files from the vendor's official domain at
ui.inference.sh. These resources are used to scaffold the agent interface. - [COMMAND_EXECUTION]: Documentation includes standard commands for installing the
@inferencesh/sdkvia npm and adding UI building blocks (chat-ui, widgets-ui, tools-ui) using thenpx skillsandshadcnCLIs. - [PROMPT_INJECTION]: The skill documents an agent component that processes instructions from an LLM to trigger client-side tools (e.g.,
scan_ui,fill_field) and render generative UI widgets. This architecture creates an indirect prompt injection surface where untrusted data processed by the LLM could attempt to influence the agent's UI actions. - Ingestion points: The
Agentcomponent consumes dynamic responses from an LLM via a definedproxyUrl(SKILL.md). - Boundary markers: No explicit delimiter or sanitization logic is shown in the provided usage examples to differentiate between LLM instructions and data.
- Capability inventory: Supports client-side tool execution, form filling, and human-in-the-loop approval workflows.
- Sanitization: Not visible in the basic implementation snippets provided in the documentation.
Audit Metadata