ux-microcopy-write
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions and referenced scripts shows no evidence of malicious behavior, obfuscation, or unauthorized data access. The skill operates within its intended functional scope for UI text generation.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to source internal utility scripts (such asid-generator.shandindex-updater.sh) and create directories. These operations are localized to the plugin's root and output directories and are used for routine platform functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests feature descriptions which serve as an untrusted data surface. The risk of indirect injection is mitigated by the 'Phase 1 Hard Stop' which requires explicit user approval of the generation plan, and by the sanitization of inputs (slugification) before they are used in filesystem operations.
Audit Metadata