openui-forge-rust
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of several external dependencies from the
@openuidevorganization on NPM, which are necessary for the generative UI functionality. - [COMMAND_EXECUTION]: Instructions include the use of
npx @openuidev/clito generate a system prompt file andcargo runto execute the Rust backend application. - [INDIRECT_PROMPT_INJECTION]: The skill implements an API endpoint that processes user-supplied chat messages and forwards them to the OpenAI API.
- Ingestion points: The
chat_handlerinbackend/src/main.rsingests amessagesarray from a JSON request body. - Boundary markers: The code does not implement explicit delimiters or system instructions to prevent the model from following instructions contained within the user-supplied messages.
- Capability inventory: The backend possesses the capability to perform authenticated network requests to the OpenAI API.
- Sanitization: No sanitization or filtering is performed on the user messages before they are interpolated into the API request.
Audit Metadata