ai-elements-chatbot
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches component source code from official registries at shadcn.io and the npm registry as part of the standard setup process.
- [REMOTE_CODE_EXECUTION]: Provides instructions to execute the
ai-elementsCLI tool viapnpm dlx, which is the standard method for initializing and adding components for this project. - [INDIRECT_PROMPT_INJECTION]: The skill implements a UI for displaying untrusted AI-generated content, creating an inherent attack surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the system through the
messagesarray provided by theuseChathook, as documented in the implementation patterns. - Boundary markers: The
Responsecomponent serves as a boundary by receiving raw markdown content for rendering. - Capability inventory: The system can render markdown content, interactive code blocks with copy actions, and status indicators for tool invocations.
- Sanitization: The skill relies on the markdown parsing logic within the
Responsecomponent to safely transform AI output into React elements. - [COMMAND_EXECUTION]: Includes a shell script (
setup-ai-elements.sh) to automate project environment verification and dependency installation using standard package managers.
Audit Metadata