imagegen-frontend-mobile
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [PROMPT_INJECTION]: The instructions do not contain any attempts to override safety guidelines, bypass filters, or hide malicious commands. The instructions are focused purely on guiding the AI's creative output for image generation.
- [DATA_EXFILTRATION]: No network operations, API calls, or sensitive file path references were detected. The skill does not handle or request credentials, tokens, or personal information.
- [COMMAND_EXECUTION]: There are no shell commands, subprocess calls, or scripts included in the skill. The instructions strictly define the AI's role as an art director for visual content and explicitly forbid code generation.
- [EXTERNAL_DOWNLOADS]: The skill does not reference external URLs, download remote scripts, or depend on third-party packages from untrusted sources.
- [OBFUSCATION]: The content is written in clear, standard Markdown. No hidden characters, Base64 encoding, or homoglyph attacks were identified.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user prompts to generate images, it lacks any tool access or code execution capabilities that could be exploited. The output is strictly limited to images, providing no surface for downstream instruction injection.
- Ingestion points: User-provided descriptions of mobile app concepts in SKILL.md.
- Boundary markers: Not explicitly defined, but the skill's scope is strictly limited to image generation.
- Capability inventory: None. The skill has no access to tools, the file system, or the network.
- Sanitization: Not applicable as the output is a visual representation and cannot execute code.
Audit Metadata