ui-ux-concept-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes untrusted data from external reference sites and mockups.
- Ingestion points: User-supplied mockups, screenshots, and reference sites (SKILL.md).
- Boundary markers: Instructions do not define explicit delimiters to isolate external content from system instructions.
- Capability inventory: The skill modifies project source code, introduces new dependencies, and interacts with host browser environments (SKILL.md).
- Sanitization: No specific measures for sanitizing or filtering text found within visual targets are mentioned.
- [COMMAND_EXECUTION]: The skill utilizes project tools and browser rendering environments to implement and verify UI changes.
- Evidence: Mentions following host and project browser-testing policies and capturing rendering evidence (SKILL.md).
- [EXTERNAL_DOWNLOADS]: The skill fetches content from user-provided reference sites for visual analysis.
- Evidence: Uses reference sites as selected targets for implementation (SKILL.md).
Audit Metadata