interface-craft
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The Design Critique sub-skill (defined in design-critique.md) creates a processing surface for external data by ingesting screenshots, source code files, and web content from URLs. This is the primary function of the critique feature but represents an entry point where embedded instructions in analyzed media could attempt to influence agent behavior.
- Ingestion points: The skill uses tools to read screenshots, local component files, and fetches remote web content via URLs.
- Boundary markers: No specific boundary markers or 'ignore' instructions are defined to separate ingested content from the system prompt.
- Capability inventory: The skill's output is limited to generating textual feedback and structural recommendations for UI improvements.
- Sanitization: The instructions do not specify sanitization or filtering for the external content before analysis.
- [EXTERNAL_DOWNLOADS]: The DialKit sub-skill (in dialkit.md) instructs users to install external Node.js dependencies, specifically 'dialkit' and 'motion' (Framer Motion), which are standard requirements for its animation and control features. These resources are consistent with the vendor's stated identity and the skill's technical purpose.
Audit Metadata