aesthetic
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the AI agent to browse and analyze external inspiration websites such as Dribbble, Behance, and Awwwards using browser automation and multimodal AI tools. This creates a surface for indirect prompt injection where malicious instructions embedded in the visual or textual content of these third-party sites could attempt to influence the agent's behavior.
- Ingestion points:
references/workflows.md(Workflow 1 and Workflow 2) details the process of browsing external URLs and capturing screenshots for analysis. - Boundary markers: Absent. The skill provides no instructions to treat external data as untrusted or to ignore potential commands found within analyzed screenshots.
- Capability inventory: The skill utilizes
chrome-devtoolsfor browser automation,bash(referenced forgallery-dlinreferences/design-resources.md), andmedia-processing(FFmpeg, ImageMagick) for file operations. - Sanitization: Absent. There are no defined verification or sanitization steps for content extracted from external platforms.
- [COMMAND_EXECUTION]: The skill references the use of
gallery-dlvia bash inreferences/design-resources.mdfor downloading reference images. This indicates an expectation of shell command execution to process data derived from external, non-whitelisted sources.
Audit Metadata