noslop-uiux
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ima2command-line utility for generating visual concepts, checking tool status, and monitoring generation processes. Commands such asima2 gen,ima2 status, andima2 psare used to produce design assets in the local./concepts/directory. This behavior is documented and central to the skill's concept exploration phase. - [EXTERNAL_DOWNLOADS]: The skill references numerous external design galleries and utility websites, including Awwwards, CSS Design Awards, Land-book, and specialized tools like tweakcn.com and oklch.com. These are well-known resources in the design community used for research and calibration. It also references the author's own utility repository on GitHub for image generation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and prioritize project-specific
DESIGN.mdfiles and user-provided design briefs. While this creates a surface for indirect prompt injection where malicious instructions could be embedded in design documentation, the skill implements a structured 'Design Read' protocol and specific rule classes to manage intent discovery, which serves as a functional boundary.
Audit Metadata