flowstate-ui-ux
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates various shell commands designed to automate development tasks. These include
grepfor auditing Vue components for hardcoded values or missing accessibility attributes, andmagick(ImageMagick) for processing and generating application icons for multiple platforms such as Tauri, Windows, macOS, and PWA. Documentation in Part 11.6 includes the commandsudo dpkg -ito facilitate the installation of the application's Debian package on Linux systems, involving administrative permissions for local deployment. \n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is intended to process and audit external UI code. 1. Ingestion points: Vue components and views (e.g., src/components/*.vue referenced in Part 14). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution via grep, magick, npm, and sudo. 4. Sanitization: Absent.
Audit Metadata