designing-interfaces

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses uvx to download and execute playwright, a well-known browser automation library maintained by Microsoft. This tool is employed to capture screenshots for visual verification of UI changes.\n- [COMMAND_EXECUTION]: The skill utilizes several shell commands to perform UI audits and verify design consistency:\n
  • playwright screenshot is executed via uvx to generate before-and-after visual comparisons of web interfaces.\n
  • grep is used in the TOKENS.md file to audit stylesheets and templates, identifying hardcoded values for colors, font sizes, and spacing.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes local project files and web endpoints to perform design audits.\n
  • Ingestion points: Project source directories (static/, templates/, src/) and local web server endpoints (http://127.0.0.1:$PORT/).\n
  • Boundary markers: None identified.\n
  • Capability inventory: File reading through grep and web rendering/screenshot capabilities via playwright.\n
  • Sanitization: None identified.\n
  • These operations are standard for the skill's purpose of design modernization and pose minimal risk when used in a developer's local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:36 AM