ui-audit

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a design and localization auditor, using standard browser automation tools to inspect rendered interfaces. All scripts and instructions are consistent with its stated purpose of improving UI quality and accessibility.
  • [DYNAMIC_EXECUTION]: The skill uses browser_evaluate to execute a bundled utility script (scripts/ui_checks.js) within the browser context. This script performs heuristic analysis of DOM elements, CSS properties, and text nodes to identify potential design flaws, which is a standard procedure for UI auditing tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external URLs and project source files. This creates an attack surface for indirect prompt injection if a malicious website contains adversarial instructions. However, the risk is mitigated by the skill's specific focus on visual and structural properties and its use of structured reporting templates, which limit the agent's interpretative scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 06:19 AM