neo-user-journey
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch and install a remote skill from an untrusted GitHub repository (
Cornjebus/neo-user-journey) usingnpx skills add. This introduces a dependency on unverified third-party code. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external website content via Playwright testing, creating a surface for indirect prompt injection attacks.
- Ingestion points: Processes content from "live or localhost URLs" as specified in
SKILL.md. - Boundary markers: No specific delimiters or safety instructions are defined to separate ingested web content from the agent's control logic.
- Capability inventory: Performs automated browser navigation, accessibility audits, and UI pattern matching using Playwright.
- Sanitization: The skill lacks explicit sanitization or filtering for the external content it retrieves.
Audit Metadata