fixing
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands and local scripts for various tasks. Evidence: references/workflow-ui.md references a Python script at .claude/skills/ui-ux-pro-max/scripts/search.py and the ImageMagick tool.
- [PROMPT_INJECTION]: The skill processes untrusted data which could facilitate indirect prompt injection attacks.
- Ingestion points: Reads from logs.txt (references/workflow-logs.md) and GitHub Actions logs via gh run view (references/workflow-ci.md).
- Boundary markers: No specific delimiters or safety instructions are defined for when the agent processes this data.
- Capability inventory: The skill can execute arbitrary commands via the Bash subagent and modify the file system.
- Sanitization: There are no instructions for sanitizing or validating the contents of the logs before analysis.
Audit Metadata