skills/vercel-labs/json-render/solid/Gen Agent Trust Hub

solid

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • UI Specification Ingestion: The skill describes a Renderer component that processes JSON objects to build a user interface. When these specifications come from external or untrusted sources, there is a potential surface for indirect prompt injection where data could influence the application's structure or actions. The documentation suggests using zod for property validation, which provides a layer of schema enforcement for ingested data.
  • Dynamic Expression Evaluation: The library supports dynamic properties such as $computed and $template strings. These features allow logic to be embedded within the JSON specifications and evaluated at runtime to update the UI reactively. This is a common pattern for JSON-driven UI frameworks and is presented here as part of the core library functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:59 AM
Security Audit — agent-trust-hub — solid