ai-ui-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides correct security guidance regarding API key management. It explicitly instructs users to keep API keys on the server (using Next.js API routes or a separate backend) and store them in environment variables (
.env.local). It uses a standard non-functional placeholdersk-...for illustration purposes. - [EXTERNAL_DOWNLOADS]: The documentation references well-known and standard development packages such as the Vercel AI SDK (
ai),openai,openai-edge,express, andtailwindcss. These are standard dependencies for the stated purpose of the skill. - [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration were found. The code snippets provided for network operations (fetching from
/api/chat) are standard for the described React functionality. - [PROMPT_INJECTION]: The content is purely instructional and contains no instructions designed to bypass safety filters, override system prompts, or hijack agent behavior.
- [OBFUSCATION]: The file was analyzed for hidden characters, zero-width spaces, and encoded strings. No obfuscation techniques were detected.
Audit Metadata