visual-qa
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local file read and write operations confined to the project directory. It lacks any network access, remote code execution capabilities, or privilege escalation patterns.- [PROMPT_INJECTION]: The skill processes internal project documentation (
DIRECTION.md,TOKENS.md) which acts as an ingestion point for external data if these files are authored by third parties. However, the skill's restricted capability (reporting only) ensures this surface does not present a significant risk. - Ingestion points: Local documentation files (
DIRECTION.md,TOKENS.md,docs/agents/qa.md) and UI screenshots. - Boundary markers: None explicitly implemented.
- Capability inventory: Local file system read access for documentation and write access for reporting in the
docs/site/qa/directory. - Sanitization: Not present, though output is limited to descriptive QA findings.
Audit Metadata