agent-ui
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a UI component registry file from
ui.inference.shusing the shadcn CLI and installs the@inferencesh/sdkpackage from NPM. These resources originate from the official domain of the service described in the skill. - [COMMAND_EXECUTION]: Instructs the user to run CLI commands to add the
belt-sh/cliskill and other related UI building blocks from theinference-shorganization. - [PROMPT_INJECTION]:
- Ingestion points: The component renders "Widgets" and "Generative UI" based on JSON data received from agent responses, creating an attack surface for indirect prompt injection.
- Boundary markers: None explicitly mentioned in the skill documentation; implementation likely resides within the external component.
- Capability inventory: The skill utilizes client-side tools like
scan_uiandfill_fieldwhich can interact with application state and form elements via a provided reference. - Sanitization: The documentation does not specify sanitization methods for agent-generated UI content, relying on the underlying SDK and component logic.
Audit Metadata