ss-verify
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from rendered UIs and project configuration files.
- Ingestion points:
SKILL.mdreferences reading project files in.styleseed/and capturing screenshots of live routes. - Boundary markers: The skill instructs the agent to use perceptual scoring (e.g., "squint test") rather than automated execution from UI content.
- Capability inventory: The skill utilizes
Read,Write,Edit, andBashtools across its referenced scripts and instructions. - Sanitization: Visual analysis of PNG screenshots provides a perceptual buffer between raw UI data and agent decision-making.
- [DYNAMIC_EXECUTION]: The skill utilizes Playwright's
page.evaluateto execute theinspectSpacingfunction in a browser context. This dynamic execution is limited to reading computed CSS properties and geometric data from the DOM, with safety checks implemented for input selectors. - [COMMAND_EXECUTION]: The agent is instructed to use
Bashto start development servers (e.g.,npm run dev) for artifact rendering. This behavior is confined to the specific project being verified and is standard for web development workflows.
Audit Metadata