ui-design-visual
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves content from well-known services for intended design functionality. The fetch_images.py script downloads images from Wikimedia Commons, and tts-doubao.mjs calls the ByteDance (Doubao) TTS API for audio generation.
- [COMMAND_EXECUTION]: The tool invokes external media processing utilities. It uses ffmpeg and ffprobe for audio mixing and video conversion, and Playwright for rendering HTML and capturing screenshots.
- [DYNAMIC_EXECUTION]: JavaScript execution within a headless browser is used for design rendering, utilizing Playwright's page.evaluate and addInitScript capabilities to extract styles and manipulate the DOM.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied markdown and HTML files, creating a potential surface for indirect injection. Ingestion points include narration scripts and HTML design files. Boundary markers are absent. Capability inventory includes subprocess execution and browser automation. Sanitization of user-provided content is not explicitly performed during the rendering pipeline.
Audit Metadata