daily-ui-inspiration-capture
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git status --shortandgit add -fto manage the repository state and stage newly created inspiration bundles. - [COMMAND_EXECUTION]: The skill runs a local validation script using
node scripts/check-ui-inspiration-duplicates.mjsto ensure no duplicate entries are added to the manifest. - [INDIRECT_PROMPT_INJECTION]: The skill captures and processes content from external websites (e.g., Framer, Dribbble). While primarily visual, ingesting untrusted external data into the agent's context creates a surface for indirect prompt injection.
- Ingestion points: External landing pages and product websites (e.g., Framer Marketplace, Dribbble).
- Boundary markers: No explicit boundary markers or delimiters identified in the instructions for separating external content.
- Capability inventory: File writing, browser capture, and shell command execution (
git,node). - Sanitization: No specific sanitization or filtering of external text content is mentioned.
- [EXTERNAL_DOWNLOADS]: As part of its primary function, the skill downloads and saves images, videos, and screenshots from well-known external web sources like Framer and Dribbble to the local file system.
Audit Metadata