Versioned security assessment

Report ID: SA-0519034D

7/9/2026, 12:26:17 PM

agent-ui security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
agent-ui
Version
v6
Maintainer
inference-sh-9
Source
github.com/inference-sh-9/skills/tree/main/skills/agent-ui/
Coverage
1 Files scanned · 120 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The skill is mostly documentation for installing and using a React and Next.js agent component. Most static shell, environment, and URL detections are markdown examples or normal documentation links. Confirmed risks are remote install commands and a hosted image that depend on external infrastructure.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 120 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 9 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 1 evidence location

External commands

May invoke commands or programs outside the Skill.

Observed in 16 evidence locations

Capability review items (4)
Medium
SKILL.md:14-20
Ruby/shell backtick execution
```bash
The quick-start block instructs users to run npx and npm install commands that modify a project and install remote dependencies. This is legitimate setup guidance, but it creates supply-chain and command execution risk if followed blindly.
Medium
SKILL.md:100-109
Ruby/shell backtick execution
```bash
The related-skills block instructs users to run npx skills add commands that install additional community skills. This is intended behavior, but it can pull unreviewed external content into the environment.
Medium
SKILL.md:16
Hardcoded URL
npx shadcn@latest add https://ui.inference.sh/r/agent.json
The hardcoded URL is passed to an npx shadcn add command that retrieves component metadata or code from a third-party host. That creates a real remote install and supply-chain trust risk.
Low
SKILL.md:10
Hardcoded URL
![Agent Component](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kgvftp7hb8wby
The markdown embeds a remote image from cloud.inference.sh. Rendering it may contact an external host and create a minor tracking or availability dependency.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Remote component install command
    Pin tool and registry versions where possible, document the trust boundary, and tell users to review fetched component code before installation.
  2. FIX-002
    Medium
    Related skill installation commands
    Add a warning that related skills should be reviewed before running npx skills add commands from a community source.
  3. FIX-003
    Low
    Remote image dependency
    Use a local marketplace asset or an approved image proxy instead of loading a remote image directly from cloud.inference.sh.
  4. FIX-004
    Low
    API key setup guidance
    State that .env.local must not be committed and recommend secret management for production deployments.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
0519034dad657fb1f7706e0550e962beeda73fdf
Content hash
596aea9a84e35d76d91697131423651c3139b2f10e28ec7f0aa2b0f54b166581
Tree hash
40ee623985a6844a0a5681a37ee3d523017954684d783dd059332d51f465a289
Skill path
skills/inference-sh-9/agent-ui
Audit payload hash
6971f741f4d65a25796cd44cf022f814

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable