skills/xfstudio/skills/a2ui-embed/Gen Agent Trust Hub

a2ui-embed

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill starts a local Python background process (a2ui_sidecar.py) to manage WebSocket communication between terminal logs and the visualization interface.
  • [COMMAND_EXECUTION]: Utilizes standard shell utilities (ss, grep, cat) to perform system diagnostic tasks such as checking for active network listeners and reading local project configuration files (projects.json).
  • [COMMAND_EXECUTION]: Generates and appends HTML, CSS, and JavaScript content to a local log file (a2ui_input.log) which is subsequently rendered in a sandboxed iframe.
  • [COMMAND_EXECUTION]: Provides instructions for the agent to autonomously start background services and verify port availability, which is consistent with the skill's stated purpose of managing a local development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 03:02 AM
Security Audit — agent-trust-hub — a2ui-embed