react-native

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Dynamic UI Interpretation: The skill defines a system for converting JSON specifications into functional mobile interfaces, including support for dynamic expressions and conditional logic. Because this system is designed to render specifications that may originate from external or AI-generated sources, it introduces a surface for indirect prompt injection where untrusted data could influence UI behavior. This is a standard consideration for dynamic rendering frameworks.
  • External Data Ingestion: The useUIStream functionality facilitates fetching UI specifications from remote API endpoints. This enables network-driven UI updates, which is a standard pattern for remote-controlled applications, though it involves processing logic retrieved from the network.
  • Component and Action Registry: The skill implements a registry system for mapping JSON types to executable UI components and handlers. While this allows for modular UI construction, it requires ensuring that the mapping between JSON identifiers and application code is securely maintained.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:37 AM
Security Audit — agent-trust-hub — react-native