ui-audit
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
npx playwrightandnpx serve, which are standard tools for browser automation and local web serving that download packages from the public npm registry. - [COMMAND_EXECUTION]: Instructions include running shell commands such as
python -m http.serverandnpx serveto host local project files for rendering and analysis. - [COMMAND_EXECUTION]: The skill utilizes browser automation tools like Playwright and Chrome DevTools to navigate to URLs, take screenshots, and evaluate page content.
- [COMMAND_EXECUTION]: Injects a local JavaScript utility (
scripts/ui_checks.js) into the target page usingbrowser_evaluateto programmatically detect UI issues like low contrast and layout overflow. - [PROMPT_INJECTION]: As the skill audits external live websites and project source code, it possesses an inherent surface for indirect prompt injection from data found in the audited content; however, the instructions focus on structured visual reporting rather than executing instructions from the data.
Audit Metadata