product-mockup

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a design assistant providing static HTML and CSS templates for product visualization. All provided code snippets are standard CSS for UI components like device frames and 3D transforms.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided product descriptions and brand metadata, which constitutes an indirect injection surface.
  • Ingestion points: User-supplied prompts describing products and the local .agents/design-context.md file (referenced in SKILL.md).
  • Boundary markers: Absent; the skill relies on the underlying LLM's prompt handling.
  • Capability inventory: The skill only generates CSS and HTML code; it does not invoke shell commands, perform network operations, or write to the filesystem.
  • Sanitization: Absent; the skill assumes inputs are design-related descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:34 AM