ux-research-discovery-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and instructional frameworks for UX research. Analysis across all threat categories (including prompt injection, data exfiltration, and remote code execution) revealed no malicious patterns or security risks.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process external qualitative data (interviews, notes, support tickets), it lacks any dangerous capabilities such as network access, file writing, or command execution. The instructions specifically guide the agent to treat this data as evidence to be synthesized rather than commands to be followed, minimizing the risk of indirect injection.
- Ingestion points: Processes qualitative notes, analytics, survey findings, and support tickets (SKILL.md).
- Boundary markers: The instructions emphasize separating observations from interpretations and using specific synthesis frameworks.
- Capability inventory: No subprocess calls, network operations, or file system writes are available to this skill.
- Sanitization: Standard instructional constraints are applied to the handling of user-provided data.
Audit Metadata