The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The WidgetSourceSchema in references/ui/widget.zod.ts supports a remote provider type that allows loading and executing JavaScript modules from external URLs.
[COMMAND_EXECUTION]: The WidgetLifecycleSchema and WidgetSourceSchema (inline type) in references/ui/widget.zod.ts allow arbitrary JavaScript code to be provided as strings and executed during widget lifecycle events such as onMount, onUpdate, and onValidate.
[DATA_EXFILTRATION]: The ViewDataSchema and ActionSchema allow for the configuration of custom API endpoints and URLs, which could be used to transmit data to external servers.
[PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes externally defined UI configurations that can contain executable code. * Ingestion points: ViewDataSchema and WidgetManifestSchema. * Boundary markers: None specified. * Capability inventory: Remote script loading and inline code execution are permitted by the schema. * Sanitization: Zod structural validation is present, but no specific content safety filtering for malicious code or URLs is identified.

objectstack-ui