daily-ui-inspiration-capture
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
scripts/check-ui-inspiration-duplicates.mjs) to validate bundle manifests and ensure data integrity. - [COMMAND_EXECUTION]: The skill performs Git operations (
git status,git add,git commit) to manage the staging and discovery of generated inspiration assets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external landing pages to generate descriptions and AI builder prompts, presenting a potential surface for malicious instructions embedded in web content.
- Ingestion points: Text and layout information extracted from external websites (e.g., Framer, Dribbble) via browser capture.
- Boundary markers: No explicit delimiters or 'ignore' instructions are provided to isolate ingested content from the agent's instructions.
- Capability inventory: File system writing, Git repository manipulation, and local Node.js script execution.
- Sanitization: The skill does not describe any sanitization or validation of the captured text before incorporating it into prompts.
Audit Metadata