ux-design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from project files, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill reads
docs/BRIEF.md,docs/GLOSSARY.md,docs/STORIES.md, and reference screenshots to perform its UX review as defined inSKILL.md. - Boundary markers: There are no explicit instructions for the agent to use delimiters or to disregard instructions embedded within the source documents.
- Capability inventory: The skill primarily generates text documentation (
UX:blocks) and reads local files; it does not have capabilities for network operations or arbitrary code execution. - Sanitization: The skill does not implement validation or filtering of the content retrieved from the source documents.
Audit Metadata