responsive-testing
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external data from web pages, which is a potential vector for indirect prompt injection.
- Ingestion points: Data is brought into the agent's context through
browser_snapshotandbrowser_take_screenshotafter navigating to a target URL (SKILL.md). - Boundary markers: The instructions do not define clear delimiters or warnings to prevent the agent from following instructions that might be embedded in the analyzed web pages.
- Capability inventory: The skill utilizes browser tools (
browser_navigate,browser_take_screenshot,browser_snapshot) to interact with potentially untrusted web content (SKILL.md). - Sanitization: No sanitization or filtering of the HTML/Aria-tree content is specified before the agent evaluates it for responsive layout issues.
Audit Metadata