ux-wireframe
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute open or xdg-open on the generated index file to display the output to the user.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests data from external research artifacts without explicit boundary markers or sanitization.
- Ingestion points: Reads files from ux/, analysis/, and PRD-*.md in SKILL.md Step 2.
- Boundary markers: Absent; the instructions do not specify delimiters or safety warnings for the ingested content.
- Capability inventory: Includes Write and Bash tools as specified in SKILL.md.
- Sanitization: Absent; the model processes raw text from artifacts to drive design decisions and generate HTML code.
Audit Metadata