prowler-test-ui
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that requires the agent to process potentially untrusted data, creating a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to navigate to pages and take DOM snapshots using Playwright tools, and to read local test specification files (
.spec.ts) and corresponding documentation files (.md). - Boundary markers: There are no instructions for the agent to use specific delimiters or to disregard potential instructions embedded within the DOM content or test files.
- Capability inventory: The skill has access to powerful capabilities including
Edit,Write, andBash(enabling command execution), along withWebFetchandWebSearchfor network access. - Sanitization: The skill does not provide mechanisms for sanitizing or filtering external content before it is processed by the agent.
Audit Metadata