skills/mvschwarz/openrig/ui-mockup/Gen Agent Trust Hub

ui-mockup

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process content from SPEC.md, validation.md, and background.md to inform the creation of UI mockups and HTML code.
  • Ingestion points: Project documentation files (SPEC.md, validation.md, background.md) are read to determine screen requirements and interaction logic.
  • Boundary markers: Absent. There are no instructions provided to the agent to distinguish between its own system instructions and potentially adversarial instructions embedded within the requirements files.
  • Capability inventory: The skill has the capability to read local project files (requirements and codebase components) and write new files (HTML, Markdown) to the supporting/ directory.
  • Sanitization: Absent. The skill does not contain instructions to sanitize or validate the input data before interpolating it into the generated HTML prototypes or ASCII wireframes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:26 AM