generate-ui-prompt
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and transform external UI/UX specifications, architecture documents, and API contracts into prompts for other AI tools, creating a surface for injection.
- Ingestion points: Untrusted data enters the agent context through the 'Required Inputs' specified in SKILL.md (UI/UX specifications, Technical Architecture, Design files, API contracts).
- Boundary markers: While the skill provides a structured framework for the final output prompt, it does not include instructions to isolate or ignore potentially malicious instructions embedded in the source documentation.
- Capability inventory: The skill is focused on text generation and does not have permissions for subprocess execution, network requests, or file writes.
- Sanitization: No explicit sanitization or content validation for the input documents is described in the instructions.
Audit Metadata