lynx-openui
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template and instructional guide for producing declarative UI code. It does not include executable scripts, shell commands, or network operations outside of its intended purpose as a UI generation tool.
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety filters were found. The skill uses negative constraints (e.g., "Do not use for JSX, HTML") to strictly limit the agent's output scope to the target DSL.
- [DATA_EXFILTRATION]: There are no commands that access sensitive files or perform unauthorized network transfers. The
@OpenUrland@ToAssistantcommands are part of the UI language's documented features and include explicit instructions to use trustworthy or caller-provided data. - [REMOTE_CODE_EXECUTION]: The skill defines a restricted, declarative DSL consumed by a specific renderer. It does not facilitate the execution of arbitrary code, system-level commands, or remote scripts.
- [EXTERNAL_DOWNLOADS]: No external packages (npm, pip) or remote script downloads are present. The skill relies entirely on its local reference files.
Audit Metadata