interactive-tool-simulation
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches external media and summaries from
goodcase.aiandx.comto ground the AI's design output in existing visual evidence. - Evidence: URLs in
references/cases.mdpoint to external case studies and media assets, such ashttps://goodcase.ai/cases/40-svg-5229d1feb246andhttps://x.com/kawai_design/status/1991461556597715056. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and follows prompt excerpts from
references/cases.mdto generate its own artifacts, which represents an attack surface for instructions embedded in data. - Ingestion points: The
references/cases.mdfile contains multiple prompt excerpts from various creators (e.g., @CryptoEights, @lumidotnew) that the agent is instructed to read and apply. - Boundary markers: The skill requires the creation of a 'Preserve / Replace / Avoid' reference contract before generating artifacts to explicitly separate case-derived traits from user-supplied context.
- Capability inventory: The skill generates implementation-ready code and UI specifications (e.g., React, Tailwind, SVG generation).
- Sanitization: Relies on a structured workflow and a verification checklist to ensure that the generated artifact aligns with user-defined success criteria and value propositions rather than being purely controlled by the external case data.
Audit Metadata