Skills
Navigate
skills/openminis/minisskills/generative-ui-minis/Gen Agent Trust Hub

generative-ui-minis

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python scripts to perform local file operations and data processing. Specifically, generative_ui_artifact.py and generative_ui_demo.py take user-provided text or JSON specifications and write rendered HTML content to the /var/minis/workspace/ directory.
  • [DATA_INGESTION]: The skill processes untrusted user input to generate HTML content. However, it implements proper HTML escaping using the html.escape() function (via the esc() helper) for all dynamic content inserted into the HTML templates, which effectively mitigates cross-site scripting (XSS) risks in the generated artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 04:20 AM