uit-timed-session-app-web

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a verification script (scripts/verify-app.mjs) that executes standard development utilities including tsc (TypeScript compiler) and vite using spawnSync. These executions are performed on the user's local workspace to validate the generated code and create a production build.
  • [PROMPT_INJECTION]: The instructions in SKILL.md and references/production-pattern.md implement strict constraints on the agent's behavior, such as prohibiting it from reading the verification script or exploring the skill's internal directory. These are used to enforce a specific architectural contract for UI development and are consistent with the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 06:17 PM