inspira-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch documentation from an external URL, which creates a surface for indirect prompt injection where malicious instructions could be embedded in the data the skill processes.\n
- Ingestion points: The skill instructs the agent to fetch documentation from
https://inspira-ui.com/docs/llms-full.txt(referenced inSKILL.mdandreferences/components-list.md).\n - Boundary markers: Absent; there are no instructions or delimiters provided to ensure the agent ignores potential commands embedded within the external documentation content.\n
- Capability inventory: The skill allows the use of shell tools (
bash,read,glob,grep) and provides scripts (scripts/setup-inspira.sh,scripts/verify-setup.sh) that can install dependencies and modify local files.\n - Sanitization: Absent; the skill does not specify any validation, filtering, or escaping for the external documentation content before it is processed by the agent.
Audit Metadata