wds-4-ux-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and configuration files designed to guide a UX designer through a systematic documentation process. No executable scripts, network-active code, or obfuscated content were found.
- [COMMAND_EXECUTION]: The workflow references a local validation script (
src/scripts/wds-validate.js) and MCP tools for image generation (nanobanana). These are standard operational components for the intended environment and do not pose a security risk as they are used for local document validation and asset creation. - [DATA_EXPOSURE]: While the skill defines templates for API documentation (e.g., endpoints for a fictional calendar app), these are placeholders for user documentation and do not involve actual network requests or exposure of sensitive user data.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input (sketches and verbal descriptions) to generate specifications. While this is an ingestion surface, the logic is limited to text extraction and documentation formatting with no autonomous execution of external instructions.
Audit Metadata