uit-timed-session-app-web
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a verification script (
scripts/verify-app.mjs) that executes standard development utilities includingtsc(TypeScript compiler) andviteusingspawnSync. These executions are performed on the user's local workspace to validate the generated code and create a production build. - [PROMPT_INJECTION]: The instructions in
SKILL.mdandreferences/production-pattern.mdimplement strict constraints on the agent's behavior, such as prohibiting it from reading the verification script or exploring the skill's internal directory. These are used to enforce a specific architectural contract for UI development and are consistent with the skill's stated purpose.
Audit Metadata