openui-forge-rust
Pass
Audited by Gen Agent Trust Hub on May 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates LLM interactions by processing user messages and a generated system prompt. While this creates a surface for indirect prompt injection, it is the primary intended function of the generative UI framework. The code uses standard OpenAI message formatting without additional sanitization layers.
- [EXTERNAL_DOWNLOADS]: The instructions require installing several Node.js and Rust dependencies from established registries. These include official SDKs like @modelcontextprotocol/sdk and framework-specific tools like @openuidev/cli. These references are consistent with the skill's development-oriented purpose.
- [COMMAND_EXECUTION]: The backend implementation involves network operations to the OpenAI API and local file system reads for configuration. No logic was detected that would allow for arbitrary shell command execution, privilege escalation, or access to sensitive system directories.
Audit Metadata