Agent skill · Audited from source
tool-ui
skill · assistant-ui/tool-uiMIT licenceAudited 20 Oct 2026 · source 5aa1ecd267db
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 5aa1ecd267db and found no filesystem, network or shell access and no hard-coded secrets. What it does: Find, install, configure, and integrate Tool UI components in React apps using shadcn registry entries, compatibility checks, scaffolded runtime wiring, toolkit setup with assistant-ui, and troubleshooting workflows.…
Cite
Cite this page
ModelsAtlas. “tool-ui (assistant-ui/tool-ui)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/assistant-ui/tool-ui
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 5aa1ecd267db · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherassistant-ui GitHub organizationOwner of the repository this skill is read from
- Source folderassistant-ui/tool-ui/packages/agent/plugin/skills/tool-uiThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict5aa1ecd267dbA new audit runs when the source changes
- Repository statusArchivedLast push 50 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Find, install, configure, and integrate Tool UI components in React apps using shadcn registry entries, compatibility checks, scaffolded runtime wiring, toolkit setup with assistant-ui, and troubleshooting workflows.…
--- name: tool-ui description: Find, install, configure, and integrate Tool UI components in React apps using shadcn registry entries, compatibility checks, scaffolded runtime wiring, toolkit setup with assistant-ui, and troubleshooting workflows. Use when developers ask to add one or more Tool UI components, choose components for a use case, verify compatibility, wire a toolkit in a codebase, or integrate Tool UI payloads into assistant-ui or an existing chat/runtime stack. --- # Tool UI Use this skill to move from request to working Tool UI integration quickly. Prefer assistant-ui when the project has no existing chat UI/runtime. Treat assistant-ui as optional when the app already has a working runtime. ## Step 1: Compatibility and Doctor Read `components.json` in the user's project and verify: - `components.json` exists. ## Step 2: Install Components ### Install command from project root **Preferred (AI-assisted integration):** ```bash npx tool-agent "integrate the <component> component" ``` Use component-specific prompts from the catalog below (e.g. `integrate the plan component for step-by-step task workflows with status tracking`). **Alternative (direct registry):** ```bash npx shadcn@latest add @tool-ui/<component-id> ``` Multiple components: ```bash npx tool-agent "integrate the plan, progress-tracker, and approval-card components for planning flows" ``` Or via shadcn: ```bash npx shadcn@latest add @tool-ui/plan @tool-ui/progress-tracker @tool-ui/approval-card ``` ### Complete component catalog All 25 Tool UI components with tool-agent prompts and shadcn install commands: **Progress** | Component | Description | tool-agent prompt | shadcn | | ------------------ | --------------------------------------------------- | ------------------------------------------------------------------------------------------------- | ------------------------------------------------- | | `plan` | Step-by-step task workflows with status tracking | `integrate the plan component for step-by-step task workflows with status tracking` | `npx shadcn@latest add @tool-ui/plan` | | `progress-tracker` | Real-time status feedback for multi-step operations | `integrate the progress tracker component for real-time status feedback on multi-step operations` | `npx shadcn@latest add @tool-ui/progress-tracker` | **Input** | Component | Description | tool-agent prompt | shadcn | | ------------------- | ------------------------------------------- | -------------------------------------------------------------------------------------- | -------------------------------------------------- | | `option-list` | Let users select from multiple choices | `integrate the option list component to let users select from multiple choices` | `npx shadcn@latest add @tool-ui/option-list` | | `parameter-slider` | Numeric parameter adjustment controls | `integrate the parameter slider component for numeric parameter adjustment controls` | `npx shadcn@latest add @tool-ui/parameter-slider` | | `preferences-panel` | Compact settings panel for user preferences | `integrate the preferences panel component for compact user settings` | `npx shadcn@latest add @tool-ui/preferences-panel` | | `question-flow` | Multi-step guided questions with branching | `integrate the question flow component for multi-step guided questions with branching` | `npx shadcn@latest add @tool-ui/question-flow` | **Display** | Component | Description | tool-agent prompt | shadcn | | ---------------- | --------------------------------------------- | ------------------------------------------------------------------------------------------ | ----------------------------------------------- | | `citation` | Display source references with attribution | `integrate the citation component to display source references with attribution` | `npx shadcn@latest add @tool-ui/citation` | | `item-carousel` | Horizontal carousel for browsing collections | `integrate the item carousel component for horizontal browsing of collections` | `npx shadcn@latest add @tool-ui/item-carousel` | | `link-preview` | Rich link previews with Open Graph data | `integrate the link preview component for rich link previews with Open Graph data` | `npx shadcn@latest add @tool-ui/link-preview` | | `stats-display` | Key metrics and KPIs in a visual grid | `integrate the stats display component for key metrics and KPIs in a visual grid` | `npx shadcn@latest add @tool-ui/stats-display` | | `terminal` | Show command-line output and logs | `integrate the terminal component to show command-line output and logs` | `npx shadcn@latest add @tool-ui/terminal` | | `weather-widget` | Weather display with forecasts and conditions | `integrate the weather widget component for weather display with forecasts and conditions` | `npx shadcn@latest add @tool-ui/weather-widget` | **Artifacts** | Component | Description | tool-agent prompt | shadcn | | ---------------- | -------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | ---
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 5aa1ecd
git clone https://github.com/assistant-ui/tool-ui git -C tool-ui checkout 5aa1ecd267db
The author documents no install command, so this uses the repository directly. Our verdict covers commit 5aa1ecd267db only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
5aa1ecd267db
Similar skills
All design & front-end skills →affaan-m/everything-claude-code
[DEPRECATED - use continuous-learning-v2] Legacy v1 stop-hook skill extractor. v2 is a strict superset with instinct-based, project-scoped, hook-reliable learning. Do not invoke v1: when continuous learning, session…
affaan-m/everything-claude-code
Instinct-based learning system that observes sessions via hooks, creates atomic instincts with confidence scoring, and evolves them into skills/commands/agents. v2.1 adds project-scoped instincts to prevent…
affaan-m/everything-claude-code
Run the conversational ECC setup wizard inside the current harness: inventory the install, collect scope (user/project/local) and hook mode (off/minimal/standard/strict) in Claude Code, use Codex's native plugin…
affaan-m/everything-claude-code
Garbage collection for your Claude Code configuration. Periodically scans ~/.claude (skills, memory, hooks, permissions, MCP servers, caches) for redundant, stale, orphaned, or low-value items, then walks the user…
affaan-m/everything-claude-code
Assemble scored competitor profile cards (from benchmark-methodology) into a decision-grade competitive report with landscape map, competitor tiers, benchmarking matrix, white-space analysis, strategic recommendations,…
affaan-m/everything-claude-code
Use when scoping a competitive landscape — identifying, categorising, and score-filtering a competitor set before any benchmarking begins. Decides who counts as a competitor, which tier they belong to, and which sources…
Questions about tool-ui
What does the tool-ui skill do?
Is tool-ui safe to install?
What can tool-ui access on my machine?
How current is this page?
Sources
- github.com/assistant-ui/tool-ui/tree/main/packages/agent/plugin/ — the audited source at commit 5aa1ecd267db and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the tool-ui skill do?
- Is tool-ui safe to install?
- What can tool-ui access on my machine?