native-ui
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution Documentation]: The skill provides documentation for the
fx.spawnAPI, which allows applications to execute subprocesses. This is a standard capability for desktop application development and is explained within the context of the framework's functionality. - [Network and File Operations]: The guide details how to perform network fetches and file I/O. It includes specific guidance on managing authentication secrets through a secure credentials API rather than storing them in plain text within the application state.
- [Input Handling and Security]: As the skill describes a UI framework that processes external data (such as web content and Markdown), it outlines the surface for handling untrusted input. It identifies relevant security configurations, such as allowed origins for Webviews, to help developers manage these interfaces safely.
Audit Metadata