spritecook-build-ui-kits
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides setup instructions involving the
spritecook-mcppackage vianpx. This package is a verified resource belonging to the skill's author and is necessary for the skill's operation within the MCP environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external visual assets, such as UI concept designs and component sheets, to extract metadata and reusable parts. This represents the primary ingestion surface for the skill.
- Ingestion points: Local image files uploaded to the SpriteCook service and generated concept assets.
- Capability inventory: MCP tool calls for UI kit lifecycle management (creation, extraction, refinement, and finalization).
- Boundary markers: The skill instructions do not specify explicit delimiters for the processed content.
- Sanitization: Data extraction is handled by specialized tools within the SpriteCook MCP server designed for UI decomposition.
Audit Metadata