ui-system-governance
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code and documentation from the local project, which constitutes an indirect prompt injection surface. However, its actions are limited to reporting and documentation. 1. Ingestion points: Project files like CSS, component source code, and READMEs (SKILL.md). 2. Boundary markers: None present. 3. Capability inventory: Read access to the codebase and markdown report generation. 4. Sanitization: No input sanitization described.
Audit Metadata