user-flow-mapper

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill serves as a structural template for organizing user experience documentation. It does not include scripts, binaries, or configuration that would allow for unauthorized actions or data access.- [EXTERNAL_DOWNLOADS]: The documentation includes a reference link to a frontend guide for further reading on Information Architecture. This is a static hyperlink and does not trigger any automated downloads or background network activity.- [PROMPT_INJECTION]: The skill processes user-provided feature descriptions, which is an ingestion point for potentially untrusted data.
  • Ingestion points: User-supplied text defining the goal and steps of a product flow within the prompt body.
  • Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded commands in the user input.
  • Capability inventory: The skill has no access to dangerous capabilities such as shell execution, file system writes, or network exfiltration.
  • Sanitization: There is no evidence of input validation or content filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 08:41 PM
Security Audit — agent-trust-hub — user-flow-mapper