tools-ui
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily consists of UI documentation and code examples for React/Next.js applications. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [EXTERNAL_DOWNLOADS]: The skill references components and configurations hosted on
ui.inference.sh. It provides an installation command usingnpx shadcnto fetch a JSON registry from the vendor's official domain. This is a standard workflow for modern UI component libraries. - [COMMAND_EXECUTION]: Documentation includes commands like
npx skills addto incorporate related UI skills from the same vendor ecosystem. These commands are intended for environment setup and are directed at the vendor's own repositories. - [INDIRECT_PROMPT_INJECTION]: The
ToolCallandToolResultcomponents are designed to render data originating from external tool executions. While this represents a surface for data ingestion, the components are standard UI elements and do not involve executing instructions contained within that data.
Audit Metadata