@json-render/react

The `$computed` expression allows calling registered functions with resolved arguments. If the `functions` registry can be controlled by untrusted input (e.g., AI-generated spec), an attacker could register and execute arbitrary code, leading to command execution or data exfiltration.

{ "$computed": "fn", "args": { ... } }

The `useUIStream` hook allows streaming UI specifications from an external API endpoint. If this endpoint is compromised or untrusted, it could serve malicious UI definitions, leading to arbitrary code execution or data exfiltration through the rendered components.

`useUIStream` | Stream specs from an API endpoint

Built-in actions like `setState`, `pushState`, `removeState`, and `validateForm` are "injected into AI prompts" and handled automatically. This allows an AI (potentially manipulated) to directly alter application state or trigger validation without explicit declaration, which could lead to state corruption or unintended side effects.

Built-in Actions | The setState, pushState, removeState, and validateForm actions are built into the React schema and handled automatically by ActionProvider. They are injected into AI prompts without needing to be declared in catalog actions: