ux
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates locally within the provided workspace. It does not attempt to access external URLs, download remote scripts, or perform any network-based exfiltration. All rule-based analysis is performed using the provided local markdown files in the
rules/directory. - [COMMAND_EXECUTION]: The skill instructs the agent to use
git diff --name-only HEAD~1to identify relevant UI files for review. This is a standard, low-risk development workflow intended to provide context-aware reviews for the user's changes. - [DATA_EXPOSURE]: The skill reads project source code to perform its primary function. There is no evidence of attempts to access sensitive system files, environment variables (e.g.,
.env), or credential stores (e.g.,~/.ssh). - [PROMPT_INJECTION]: The skill is designed as an advisory tool. While it processes untrusted code files that could contain indirect prompt injections, it has no destructive capabilities or network access that could be exploited to compromise the system or data.
Audit Metadata