ux-researcher
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of markdown instructions and templates for UX research workflows. It does not include any executable code, scripts, or external dependencies.
- [SAFE]: No network operations (such as curl or wget) or sensitive file path access (such as .ssh or .env) were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting untrusted data from user research (interviews, surveys, and behavioral data).
- Ingestion points: Data collection activities described in the 'Your Workflow Process' and 'User Persona Template' sections.
- Boundary markers: The instructions do not define specific delimiters for external content but include high-level 'Ethical Research Practices' rules to protect privacy.
- Capability inventory: The skill has no capabilities to execute commands, write to the file system, or make network requests.
- Sanitization: No explicit sanitization logic is provided.
- Conclusion: Given the total absence of dangerous capabilities, this ingestion surface poses no practical security risk.
Audit Metadata