ui-widget-developer
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- Automated Development Workflow: The skill leverages standard developer utilities like
npxanddevtunnelto automate the configuration of development environments. These operations are conducted using official tools from known organizations. - Background Process Management: For local testing, the skill provides patterns to run servers in the background using
Start-Process(Windows) andnohup(Linux/Mac). This is a functional requirement for maintaining local server availability during agent interaction. - Security Best Practices: The documentation explicitly includes security considerations, such as path traversal protections in the reference server implementation and XSS sanitization (HTML escaping) for interactive widgets.
- Network Configuration: The skill instructs the agent to configure CORS with specific origin-checking (e.g.,
*.m365.cloud.microsoft) rather than using broad wildcards, ensuring that the local development server is only accessible to authorized environments.
Audit Metadata