variant
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill focuses on UI design methodology, accessibility compliance (ensuring keyboard reachability, visible focus, and responsive design), and project-specific styling consistency.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project files (styling systems, component libraries, and design tokens) to inform the generation of UI variants. While this constitutes data ingestion from the local environment, the instructions emphasize using this information for design coherence rather than executable logic, and no patterns of unsafe interpolation were found.
- [COMMAND_EXECUTION]: The skill suggests using URL search parameters (e.g.,
?variant=quiet) as a mechanism to switch between UI versions. This is a standard front-end development practice for state management in a review harness and does not involve server-side command execution or unauthorized data access.
Audit Metadata