ux-gap-detector
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its core function of ingesting and analyzing untrusted data from target websites.
- Ingestion points: Untrusted content is ingested from the target application via
browser_snapshot(accessibility tree) andbrowser_screenshotcommands throughout the Discovery and Scenario Execution phases inSKILL.mdandcategories.md. - Boundary markers: The skill does not employ delimiters or explicit instructions to the agent to ignore or isolate instructions that may be embedded in the audited website's content.
- Capability inventory: The skill is granted the
Bashtool andghCLI for creating GitHub issues, which are powerful capabilities that could be targeted for abuse if the agent is manipulated by malicious website data. - Sanitization: There is no evidence of sanitization, filtering, or structural validation of the data retrieved from the target URL before it is processed and analyzed by the agent.
Audit Metadata