product-mockup
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a design assistant providing static HTML and CSS templates for product visualization. All provided code snippets are standard CSS for UI components like device frames and 3D transforms.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided product descriptions and brand metadata, which constitutes an indirect injection surface.
- Ingestion points: User-supplied prompts describing products and the local
.agents/design-context.mdfile (referenced in SKILL.md). - Boundary markers: Absent; the skill relies on the underlying LLM's prompt handling.
- Capability inventory: The skill only generates CSS and HTML code; it does not invoke shell commands, perform network operations, or write to the filesystem.
- Sanitization: Absent; the skill assumes inputs are design-related descriptions.
Audit Metadata