skills/mxyhi/ok-skills/ai-elements/Gen Agent Trust Hub

ai-elements

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation and examples reference the ai-elements package via standard package runners (npx, pnpm, bun). Assets such as audio and images are hosted on vercel-storage.com and vusercontent.net, which are well-known and trusted platforms.
  • [COMMAND_EXECUTION]: All command-line examples provided are standard developer workflows for installing and running Node.js packages. No arbitrary or high-risk command execution was detected in the scripts or documentation.
  • [CREDENTIALS_UNSAFE]: The examples correctly demonstrate the use of environment variables for API keys. Any hardcoded strings resembling secrets (like sk-1234...) are clearly placeholders used for documentation and do not represent actual exposed credentials.
  • [REMOTE_CODE_EXECUTION]: While the skill includes a JSXPreview component for rendering dynamic UI, it utilizes react-jsx-parser rather than unsafe execution methods like eval(). This is a standard approach for rendering AI-generated UI components safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 02:02 AM