ux-map-maker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a coordinator that ingests untrusted user data to generate interactive visual artifacts in HTML format.
- Ingestion points: The skill processes user-supplied verbal descriptions, markdown documents, Mermaid diagrams, feature specifications, and user stories (mentioned in SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to separate user-provided content from the skill's own logic or to prevent the agent from following instructions embedded within the ingested data.
- Capability inventory: The skill is designed to produce standalone HTML files and visual diagrams using specialized sub-skills (
interactive-flow-diagram,screen-flow-diagram,journey-map), providing a pathway from untrusted input to generated code output. - Sanitization: The instructions do not specify any validation or sanitization steps for the external content before it is used to build the maps.
Audit Metadata