ui-audit

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends using npx playwright and npx serve, which are standard tools for browser automation and local web serving that download packages from the public npm registry.
  • [COMMAND_EXECUTION]: Instructions include running shell commands such as python -m http.server and npx serve to host local project files for rendering and analysis.
  • [COMMAND_EXECUTION]: The skill utilizes browser automation tools like Playwright and Chrome DevTools to navigate to URLs, take screenshots, and evaluate page content.
  • [COMMAND_EXECUTION]: Injects a local JavaScript utility (scripts/ui_checks.js) into the target page using browser_evaluate to programmatically detect UI issues like low contrast and layout overflow.
  • [PROMPT_INJECTION]: As the skill audits external live websites and project source code, it possesses an inherent surface for indirect prompt injection from data found in the audited content; however, the instructions focus on structured visual reporting rather than executing instructions from the data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 07:09 PM
Security Audit — agent-trust-hub — ui-audit