ui-mockup
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process content from
SPEC.md,validation.md, andbackground.mdto inform the creation of UI mockups and HTML code. - Ingestion points: Project documentation files (
SPEC.md,validation.md,background.md) are read to determine screen requirements and interaction logic. - Boundary markers: Absent. There are no instructions provided to the agent to distinguish between its own system instructions and potentially adversarial instructions embedded within the requirements files.
- Capability inventory: The skill has the capability to read local project files (requirements and codebase components) and write new files (HTML, Markdown) to the
supporting/directory. - Sanitization: Absent. The skill does not contain instructions to sanitize or validate the input data before interpolating it into the generated HTML prototypes or ASCII wireframes.
Audit Metadata