ux-heuristics
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for UX evaluation based on established industry standards and includes no malicious logic, external downloads, or persistence mechanisms.- [INDIRECT_PROMPT_INJECTION]: The skill accepts untrusted inputs (HTML, code) for analysis, creating a potential vector for indirect prompt injection.
- Ingestion points: User-provided screenshots, HTML, and code files (SKILL.md).
- Boundary markers: Not explicitly defined in the agent's instructions.
- Capability inventory: Limited to text generation; no network or file system write permissions are invoked by the skill's logic.
- Sanitization: Not provided.
- Risk Assessment: Evaluated as safe due to the absence of exploitable system-level capabilities.
Audit Metadata