game-ui-page-generator
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes several external documentation files without sanitization or boundary markers, which could allow instructions embedded in those documents to influence the agent's behavior.
- Ingestion points: The skill reads project files including
gdd.md,prd.md,interaction.md,spec.md,research.md, and YAML files in thecontracts/directory. - Boundary markers: Missing. The instructions do not define specific delimiters or warn the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill performs file system writes to
prompts/pages/andassets/pages/, and updatesscreen-contract.yamlandasset-manifest.yaml. - Sanitization: Absent. There is no guidance for the agent to validate or sanitize the content of the ingested files before using them to generate UI prompts and assets.
Audit Metadata