widgets-ui
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches UI component registry data from
https://ui.inference.sh/r/widgets.jsonusing thenpx shadcncommand as part of its quick-start setup. - [EXTERNAL_DOWNLOADS]: Recommends the installation of auxiliary tools like
belt-sh/cliand related generative UI skills using standard package managers. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for rendering UI based on agent-generated data, which is its primary intended function.
- Ingestion points: Data passed to the
WidgetRenderercomponent inSKILL.md. - Boundary markers: Not explicitly defined; the skill assumes the host application handles context boundaries.
- Capability inventory: Limited to rendering UI elements (buttons, forms, layout) within a React/Next.js environment.
- Sanitization: Relies on standard React component safety for rendering text and handling form inputs.
Audit Metadata