daily-ui-inspiration-capture
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's behavior matches its stated purpose of automating UI design inspiration collection.
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (scripts/check-ui-inspiration-duplicates.mjs) to verify that items are not duplicated. This is a routine automation step within the project's workflow.
- [PROMPT_INJECTION]: The skill fetches data from external sites (Framer, Dribbble) to generate AI prompts. This is a standard use of the WebFetch tool for this workflow and presents a low risk of indirect prompt injection. 1. Ingestion points: WebFetch calls to external landing pages in SKILL.md. 2. Boundary markers: None specified for the fetched content. 3. Capability inventory: The skill utilizes Bash, WebFetch, and filesystem tools (Read, Write, Edit, Glob, Grep) to process captured data. 4. Sanitization: No explicit content sanitization is described.
Audit Metadata