ux-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external UI code (Slim, HTML, CSS, and JavaScript) to perform usability reviews. This creates a surface for indirect prompt injection where malicious instructions could be embedded within the code or comments to manipulate the agent.
- Ingestion points: The agent is instructed to read templates, partials, Stimulus controllers, and CSS provided by the user.
- Boundary markers: There are no explicit instructions or delimiters defined to isolate the reviewed code from the agent's core logic or to ignore instructions embedded within the data.
- Capability inventory: The skill is limited to generating a report. It does not contain instructions for file system modifications, network exfiltration, or arbitrary command execution.
- Sanitization: No sanitization or validation of the input code is specified in the instructions.
Audit Metadata