qa-ui
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to browse and audit external or local websites and prototypes, which exposes the agent to untrusted content that could contain instructions designed to manipulate the agent's output.
- Ingestion points: The agent navigates to user-provided URLs or local ports in Step 1 and interacts with various page elements in Step 2 of the SKILL.md file.
- Boundary markers: Absent. There are no explicit delimiters or instructions telling the agent to ignore or isolate instructions found within the websites it is auditing.
- Capability inventory: The skill uses browser tools to navigate, click elements, and take screenshots (Step 2 and Step 3).
- Sanitization: Absent. There is no evidence of filtering, validation, or sanitization of the web content before the agent processes it for reporting.
Audit Metadata