product-ui
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and configuration files which could contain hidden malicious instructions.
- Ingestion points: Reads package.json, routing files, and React component source code during the exploration phase (SKILL.md, Section 1).
- Boundary markers: None explicitly defined to separate untrusted code from instructions.
- Capability inventory: The skill can read and modify workspace files and execute existing project build scripts.
- Sanitization: None explicitly mentioned.
- [SAFE]: The skill implements security best practices by requiring proper HTML input types for authentication and prohibiting the exposure of sensitive internal information in user-facing error messages (references/component-resolution.md, references/page-recipes.md).
- [SAFE]: Command execution is strictly limited to existing project build and test scripts, which reduces the risk of arbitrary command injection (SKILL.md, Section 5).
Audit Metadata