huggingface-gradio

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill documents the gr.HTML component which supports js_on_load and JavaScript template expressions. This is a documented feature of the Gradio library used for creating interactive custom UI components.
  • [INDIRECT_PROMPT_INJECTION]: As a framework for building user interfaces, the patterns described involve ingesting data from untrusted sources via components such as gr.Textbox, gr.File, and gr.ChatInterface. The documentation correctly notes that components like gr.Chatbot and gr.Markdown include sanitize_html=True by default to mitigate XSS risks.
  • [COMMAND_EXECUTION]: The skill includes instructions for using the gradio CLI utility. The info and predict commands are used to discover and interact with remote API endpoints (Hugging Face Spaces), which involves standard network operations for the library.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 01:28 PM
Security Audit — agent-trust-hub — huggingface-gradio