ui-page
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a template for generating React code that ingests untrusted user input via the $0 (page name) and $ARGUMENTS (page description) placeholders.
- Ingestion points: Found in SKILL.md as placeholders for user-supplied arguments.
- Boundary markers: Absent; user-provided descriptions are interpolated into the generation process without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has the capability to write files to the project directory to scaffold new pages.
- Sanitization: Absent; the skill does not provide instructions for validating or escaping the user-provided descriptions before they are processed by the agent.
Audit Metadata