generative-ui
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform standard development tasks using the vendor's official CLI tool. This is the primary and expected function of the skill.
- Evidence:
SKILL.mdcontains instructions to executenpx tambo create-app,npx tambo init, andnpm run devto scaffold and start the project. - [EXTERNAL_DOWNLOADS]: The skill manages dependencies by installing well-known and vendor-specific packages from official registries.
- Evidence:
references/tools-and-context.mdspecifies the installation of@modelcontextprotocol/sdk,zod, andzod-to-json-schemavia standard package management commands. - [SAFE]: The skill demonstrates a strong security posture by explicitly directing users toward secure authentication flows and recommending the redaction of sensitive information when interacting with support.
- Evidence: Instructions in
SKILL.mdstate to never ask users for manual API key input and to redact keys from issue reports.
Audit Metadata