openui-forge-anthropic
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate code for a generative UI bridge between Anthropic's Claude API and the OpenUI frontend framework. The backend logic in
app/api/chat/route.tscorrectly handles event stream transformation without any unauthorized data access or hidden operations. - [SAFE]: Dependency management uses standard package names (
@openuidev/react-ui,lucide-react,@anthropic-ai/sdk) that are consistent with the skill's stated purpose and vendor ecosystem. No typosquatting or suspicious third-party packages were identified. - [SAFE]: Secret management practices are secure, instructing users to store the
ANTHROPIC_API_KEYin environment variables (.env.local) rather than hardcoding credentials. - [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were found. All network operations are directed to the expected Anthropic API endpoints via the official SDK.
Audit Metadata