ui-color-palette-manage-palettes
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external platform which could contain malicious instructions.
- Ingestion points: External data is introduced to the agent's context through the output of
list_published_palettesandget_published_paletteinSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or provide warnings to the agent regarding potential instructions embedded within palette metadata.
- Capability inventory: The skill possesses write capabilities including
publish_palette,update_published_palette, andunpublish_paletteacross its scripts. - Sanitization: There is no mention of sanitization, escaping, or validation of the palette names and descriptions before they are processed by the agent.
Audit Metadata