fineui
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and code snippets for software development. It does not contain any executable scripts or malicious logic directed at the agent or the user's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill provides guidance on handling user-submitted data through UI components such as forms and rich text editors. It explicitly identifies the vulnerability surface and instructs developers to use HTML encoding and sanitization methods (e.g., proper use of RawHtml) to prevent injection attacks in the applications they build.
- [EXTERNAL_DOWNLOADS]: The documentation contains references to the official framework website (fineui.com) and other well-known domains like deepseek.com and ustc.edu.cn for extended API documentation and examples. These are legitimate resources used for developer reference and do not present a security risk.
Audit Metadata