ui-spec
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to process untrusted project data.
- Ingestion points: The skill is instructed to inspect available product requirements, project vocabulary, brand material, and existing interfaces (SKILL.md).
- Boundary markers: No specific delimiters or safety instructions are used to distinguish external data from the agent's core instructions.
- Capability inventory: The skill performs file-writing operations to create docs/ux-spec.md (SKILL.md).
- Sanitization: No sanitization, filtering, or escaping is applied to the content ingested from the project files.
Audit Metadata