design-an-interface
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied module descriptions and requirements to generate prompts for sub-agents, creating a surface for indirect prompt injection.
- Ingestion points: User input collected during the 'Gather Requirements' phase in SKILL.md.
- Boundary markers (absent): The prompt templates in the 'Generate Designs' section do not use delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill uses the 'Task tool' to spawn and coordinate multiple sub-agents for text generation.
- Sanitization (absent): The skill does not perform any validation or escaping of the requirements before interpolation into sub-agent prompts.
Audit Metadata