ux-copy
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input via variables to generate text, creating a surface for potential prompt injection attacks.
- Ingestion points: Data enters the skill context through the
$0(Context) and$ARGUMENTS(Description) placeholders inSKILL.md. - Boundary markers: There are no delimiters (e.g., XML tags or triple quotes) or specific instructions to the agent to treat the user-provided description as untrusted data or to ignore embedded instructions.
- Capability inventory: No tool invocations, subprocess calls, network operations, or file-writing capabilities are defined within this skill's instructions or metadata.
- Sanitization: The skill does not implement any validation, filtering, or escaping of the user-provided input before it is used for copy generation.
Audit Metadata