noslop-uiux

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the ima2 command-line utility for generating visual concepts, checking tool status, and monitoring generation processes. Commands such as ima2 gen, ima2 status, and ima2 ps are used to produce design assets in the local ./concepts/ directory. This behavior is documented and central to the skill's concept exploration phase.
  • [EXTERNAL_DOWNLOADS]: The skill references numerous external design galleries and utility websites, including Awwwards, CSS Design Awards, Land-book, and specialized tools like tweakcn.com and oklch.com. These are well-known resources in the design community used for research and calibration. It also references the author's own utility repository on GitHub for image generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and prioritize project-specific DESIGN.md files and user-provided design briefs. While this creates a surface for indirect prompt injection where malicious instructions could be embedded in design documentation, the skill implements a structured 'Design Read' protocol and specific rule classes to manage intent discovery, which serves as a functional boundary.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:55 PM