ui-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource Integration: The skill fetches documentation and library scripts from the project's official domain (
ui-sdk.dev). This practice is routine for web libraries providing CDN-based distribution and hosted documentation. - UI-to-Agent Interface Surface: The skill facilitates a bridge between UI components and AI agents via the
createAgentAPI. This creates a surface where the agent interacts with application data. - Ingestion points: The agent observes the interface state and control labels through the
agent.snapshot()function, primarily withinSKILL.mdandreferences/agent-ready.md. - Boundary markers: The skill incorporates specific attributes like
data-agent-hiddenanddata-agent-secretto explicitly prevent the agent from seeing or reading sensitive regions, as detailed inreferences/agent-ready.md. - Capability inventory: The
agent.act()method enables the agent to perform actions such assetValueorpresson designated UI controls. - Sanitization and Control: To mitigate risks, the architecture includes a mandatory
allowcallback. This is designed to implement human-in-the-loop verification for any action marked withdata-agent-confirm. - Dynamic Tool Registration: The skill utilizes
registerToolsto expose capabilities to browser-based agents via the WebMCP protocol. This is an intended integration pattern for the library's agent-ready functionality.
Audit Metadata