flowstate-ui-ux

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill incorporates various shell commands designed to automate development tasks. These include grep for auditing Vue components for hardcoded values or missing accessibility attributes, and magick (ImageMagick) for processing and generating application icons for multiple platforms such as Tauri, Windows, macOS, and PWA. Documentation in Part 11.6 includes the command sudo dpkg -i to facilitate the installation of the application's Debian package on Linux systems, involving administrative permissions for local deployment. \n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is intended to process and audit external UI code. 1. Ingestion points: Vue components and views (e.g., src/components/*.vue referenced in Part 14). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution via grep, magick, npm, and sudo. 4. Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 01:15 AM
Security Audit — agent-trust-hub — flowstate-ui-ux