anti-slop-ui
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from source files and rendered web pages to perform UI audits.
- Ingestion points: The
scripts/scan-slop.mjsscript reads local source files, andscripts/_shared/layout-probe.mjsvisits external URLs using Playwright. - Boundary markers: The skill provides detailed operating rules in
references/_shared/experience-core.mdand areferences/final-slop-gate.mdto ensure the agent follows evidence-based reasoning rather than arbitrary content. - Capability inventory: The tools extract technical signals (e.g., CSS properties, text patterns) used for quality verdicts.
- Sanitization: The scanning logic uses fixed regular expressions to count specific signals rather than interpreting the content as instructions.
- [DYNAMIC_EXECUTION]: The browser-based inventory tool in
scripts/_shared/layout-probe.mjsusespage.evaluate()to execute predefined data collection scripts within a browser context. - [EXTERNAL_DOWNLOADS]: The skill's layout scanner relies on Playwright, a well-known browser automation framework from Microsoft. The installation instructions in
scripts/_shared/layout-probe.mjsrefer to official package registries and browser binaries.
Audit Metadata