using-ui-stack
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a design system (spacing, color, typography, accessibility) for the agent to use when generating UI components. It does not access sensitive system files, execute shell commands, or perform unauthorized network operations. The provided external links are for documentation purposes and do not trigger automated script execution.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read design tokens or configuration files from the project environment, which represents a surface for ingesting external data. 1. Ingestion points: Project configuration files or design tokens referenced in Workflow Step 1. 2. Boundary markers: Absent; the skill does not specify delimiters to separate configuration data from instructions. 3. Capability inventory: Generation of UI code (HTML, CSS, JavaScript). 4. Sanitization: Absent; no validation or sanitization logic is provided for the ingested configuration.
Audit Metadata