ai-elements
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and examples reference the
ai-elementspackage via standard package runners (npx,pnpm,bun). Assets such as audio and images are hosted onvercel-storage.comandvusercontent.net, which are well-known and trusted platforms. - [COMMAND_EXECUTION]: All command-line examples provided are standard developer workflows for installing and running Node.js packages. No arbitrary or high-risk command execution was detected in the scripts or documentation.
- [CREDENTIALS_UNSAFE]: The examples correctly demonstrate the use of environment variables for API keys. Any hardcoded strings resembling secrets (like
sk-1234...) are clearly placeholders used for documentation and do not represent actual exposed credentials. - [REMOTE_CODE_EXECUTION]: While the skill includes a
JSXPreviewcomponent for rendering dynamic UI, it utilizesreact-jsx-parserrather than unsafe execution methods likeeval(). This is a standard approach for rendering AI-generated UI components safely.
Audit Metadata