heatmap-interpreter
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill instructions focus on UX analysis and data interpretation without requesting sensitive permissions or performing external network requests.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted heatmap data (click, scroll, move), representing a potential ingestion point for indirect prompt injection.
- Ingestion points: Heatmap observations described in the 'Process' section of
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the analyzed data.
- Capability inventory: Analysis of the skill body and metadata reveals no tool access, network operations, or shell command execution capabilities.
- Sanitization: No input validation or sanitization routines are specified for the incoming data.
Audit Metadata