openui-forge-ruby

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Provides standard instructions for installing frontend dependencies and running a local development server using Puma.
  • [EXTERNAL_DOWNLOADS]: Installs necessary packages from the official NPM and RubyGems registries, which are standard for the described application stack.
  • [REMOTE_CODE_EXECUTION]: Uses a vendor-specific CLI tool (@openuidev/cli) to generate a system prompt file locally as part of the setup process.
  • [DATA_EXFILTRATION]: The backend proxies requests to OpenAI's official API endpoints. It correctly handles the OPENAI_API_KEY via environment variables and includes safeguards to ensure the server-side system prompt cannot be overridden by client requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:34 AM
Security Audit — agent-trust-hub — openui-forge-ruby