review-ui
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including pull request diffs, Figma frames, and local application previews. This creates a surface for indirect prompt injection if malicious instructions are embedded within the analyzed UI or code metadata. However, the skill's instructions mandate a read-only review mode and it lacks high-risk capabilities such as network exfiltration or arbitrary command execution.
- Ingestion points:
SKILL.md(PR diffs, Figma frames, screenshots, local app previews). - Boundary markers: Absent.
- Capability inventory: Read-only file access for inspecting code context.
- Sanitization: Not present.
Audit Metadata