ux-polish
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML data which could contain malicious instructions designed to influence the agent's behavior during the design polish process.
- Ingestion points: Target HTML files and design system configuration files (design-system.yaml).
- Boundary markers: The skill lacks explicit instructions or delimiters to isolate processed content from the agent's control logic.
- Capability inventory: Access to 'Write' for file modification and 'Bash' for shell execution.
- Sanitization: No sanitization or validation of the input HTML content is specified before processing.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute 'open' or 'xdg-open' on target files. This could potentially lead to command injection if a maliciously crafted filename is passed through $ARGUMENTS and used directly in the shell command.
Audit Metadata