mock
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by treating external documentation as "non-negotiable ground truth."
- Ingestion points: Reads
DESIGN.mdandPRODUCT.mdfrom the project root directory. - Boundary markers: None identified; instructions command the agent to read the files "fully" and follow "every token."
- Capability inventory: The skill has the ability to write HTML files to the local filesystem (in
mocks/andaccepted/directories) and execute browser automation commands. - Sanitization: The skill lacks explicit sanitization or instructions to ignore potential directives embedded within the grounding files.
- [COMMAND_EXECUTION]: The skill performs shell-based operations to automate design reviews.
- Command logic: Executes
agent-browserfor resizing, screenshotting, and capturing snapshots of generated HTML files. - System Interaction: Uses shell redirection (
>) to save browser snapshots to disk.
Audit Metadata