laws-of-ux-review
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and analyzing user-provided code files, which constitutes an indirect prompt injection surface. A malicious user could include instructions within code comments to influence the agent's audit results or behavior. Ingestion points: The skill reads target component or page files in Step 1. Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions within the audited code. Capability inventory: The skill has permissions to read local files and generate code snippets based on that content. Sanitization: No input validation or sanitization of the target code is specified.
Audit Metadata