ai-friendly-web-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to analyze and refactor external HTML and UI code, creating a surface for indirect prompt injection if the analyzed content contains malicious instructions.
- Ingestion points: Processes HTML source code and DOM structures during 'Review Existing UI' and 'Refactor Existing UI' task modes (SKILL.md).
- Boundary markers: Absent. The instructions do not define specific delimiters or directives to ignore instructions embedded within comments or attributes of the code being processed.
- Capability inventory: The skill is intended for agents with code generation and file modification capabilities, which could be misused if an injection occurs.
- Sanitization: Absent. There are no guidelines for the agent to sanitize or validate inputs from the analyzed web interfaces.
Audit Metadata