uniform-sdk

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate documentation and integration patterns for the Uniform SDK and CLI. All recommended practices align with standard software development workflows for a Content Management System (CMS).
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official vendor packages such as @uniformdev/cli and @uniformdev/canvas via npm. These are standard dependencies required for the skill's primary purpose.
  • [COMMAND_EXECUTION]: Documentation includes examples for using the uniform CLI tool for common tasks like project synchronization (pull, push) and content management. These commands are executed by the user/agent to interact with the vendor's platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external APIs (Uniform entries and compositions). While this presents a potential attack surface for indirect prompt injection if the fetched content contains malicious instructions, this is a core functionality of the CMS SDK and is addressed by platform-level guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 04:51 AM