laws-of-ux
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided UI code (HTML, CSS, and JavaScript), which is a common vector for indirect prompt injection. \n
- Ingestion points: UI code is ingested in 'Review mode' for usability analysis as described in the
SKILL.mdoverview. \n - Boundary markers: The skill lacks explicit delimiters or instructions for the agent to differentiate between executable code/styling and malicious natural language instructions that might be embedded in comments or strings. \n
- Capability inventory: The skill itself does not define or request dangerous capabilities, relying on the agent's existing toolset. \n
- Sanitization: No sanitization or validation logic is defined to check the integrity of the code before processing.
Audit Metadata