inspira-ui

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch documentation from an external URL, which creates a surface for indirect prompt injection where malicious instructions could be embedded in the data the skill processes.\n
  • Ingestion points: The skill instructs the agent to fetch documentation from https://inspira-ui.com/docs/llms-full.txt (referenced in SKILL.md and references/components-list.md).\n
  • Boundary markers: Absent; there are no instructions or delimiters provided to ensure the agent ignores potential commands embedded within the external documentation content.\n
  • Capability inventory: The skill allows the use of shell tools (bash, read, glob, grep) and provides scripts (scripts/setup-inspira.sh, scripts/verify-setup.sh) that can install dependencies and modify local files.\n
  • Sanitization: Absent; the skill does not specify any validation, filtering, or escaping for the external documentation content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:00 AM
Security Audit — agent-trust-hub — inspira-ui