login-flow
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious behaviors were identified across all analyzed categories.
- [PROMPT_INJECTION]: The skill contains instructional content for UI generation without any attempts to bypass safety filters or override system instructions.
- [DATA_EXFILTRATION]: No network operations, credential harvesting, or access to sensitive local files were detected. The example HTML prototype operates entirely client-side.
- [REMOTE_CODE_EXECUTION]: No external script downloads or execution patterns (like
curl | bash) are present. - [COMMAND_EXECUTION]: The skill does not perform any shell command execution or subprocess spawning.
- [OBFUSCATION]: All content is in plain text. No Base64, hex encoding, or hidden characters were found.
- [PRIVILEGE_ESCALATION]: No commands attempting to gain administrative or root access were found.
- [PERSISTENCE]: The skill does not attempt to modify system configurations or establish persistence.
- [DYNAMIC_EXECUTION]: The included JavaScript is limited to a simple UI toggle for password visibility and does not involve unsafe evaluation of code.
Audit Metadata