uniform-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate documentation and integration patterns for the Uniform SDK and CLI. All recommended practices align with standard software development workflows for a Content Management System (CMS).
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official vendor packages such as
@uniformdev/cliand@uniformdev/canvasvia npm. These are standard dependencies required for the skill's primary purpose. - [COMMAND_EXECUTION]: Documentation includes examples for using the
uniformCLI tool for common tasks like project synchronization (pull,push) and content management. These commands are executed by the user/agent to interact with the vendor's platform. - [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external APIs (Uniform entries and compositions). While this presents a potential attack surface for indirect prompt injection if the fetched content contains malicious instructions, this is a core functionality of the CMS SDK and is addressed by platform-level guardrails.
Audit Metadata