ai-elements-workflow
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes
npx ai-elements@latestandnpm i @xyflow/react. These are official package management commands for Vercel's AI UI components and the React Flow library. Vercel is a trusted organization within the established security scope. - [COMMAND_EXECUTION] (SAFE): The skill provides standard shell commands for project initialization and component installation (
create-next-app,npx). These commands are standard for modern Next.js development and do not execute suspicious or obfuscated code. - [REMOTE_CODE_EXECUTION] (SAFE): While
npxexecutes remote code from the npm registry, the targets are well-known development tools associated with trusted providers (Vercel and React Flow).
Audit Metadata