nuxt-ui
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation repository for Nuxt UI v4, offering templates and best practices for building Vue-based user interfaces. It does not contain any executable scripts or malicious instructions.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing official packages such as
@nuxt/ui,tailwindcss, and AI integration libraries like@ai-sdk/vueand@comark/nuxtusing standard package managers (pnpm). These are legitimate, industry-standard dependencies from the vendor. - [COMMAND_EXECUTION]: The skill provides examples of standard development commands, such as using
npx nuxi@latest initto bootstrap projects from official Nuxt templates andclaude mcp addto configure the official Nuxt UI MCP server. - [INDIRECT_PROMPT_INJECTION]: While the skill provides components for handling user-generated content (e.g., chat interfaces and forms), it mitigates risks by recommending robust sanitization patterns:
- Ingestion points: Untrusted data is handled through components like
UChatMessages,UForm, andUInputdescribed inreferences/layouts/chat.mdandreferences/guidelines/forms.md. - Boundary markers: The skill recommends using the
Comarkcomponent to render AI-generated markdown, which handles content rendering in a controlled manner. - Capability inventory: The skill focus is on UI presentation; no dangerous system capabilities or arbitrary code execution paths are exposed.
- Sanitization: The skill strongly promotes the use of Standard Schema (Zod) for all form inputs to ensure data integrity and validation before processing.
Audit Metadata