refactoring-ui

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify user-supplied UI code and design descriptions, creating a potential surface for indirect prompt injection if the processed data contains malicious instructions.
  • Ingestion points: The skill ingests user-provided code snippets and UI descriptions via triggers like 'fix the design', 'Tailwind styling', and 'visual hierarchy'.
  • Boundary markers: No specific boundary markers or instructions to isolate the agent from embedded commands in the user-provided content are defined.
  • Capability inventory: The skill is capable of generating and refactoring frontend code (HTML, CSS, Tailwind).
  • Sanitization: No explicit sanitization or filtering logic is present to validate the input data before processing.
  • [EXTERNAL_DOWNLOADS]: The skill includes external references to educational materials and documentation.
  • Evidence: Several links to books on Amazon and the official Refactoring UI website are provided in the 'Further Reading' section of SKILL.md.
  • Context: The Amazon links include affiliate marketing tags (tag=wondelai00-20) associated with the author. Amazon is a well-known service, and these references are consistent with the skill's educational purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 01:29 PM