designing-interfaces
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxto download and executeplaywright, a well-known browser automation library maintained by Microsoft. This tool is employed to capture screenshots for visual verification of UI changes.\n- [COMMAND_EXECUTION]: The skill utilizes several shell commands to perform UI audits and verify design consistency:\n playwright screenshotis executed viauvxto generate before-and-after visual comparisons of web interfaces.\ngrepis used in theTOKENS.mdfile to audit stylesheets and templates, identifying hardcoded values for colors, font sizes, and spacing.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes local project files and web endpoints to perform design audits.\n- Ingestion points: Project source directories (
static/,templates/,src/) and local web server endpoints (http://127.0.0.1:$PORT/).\n - Boundary markers: None identified.\n
- Capability inventory: File reading through
grepand web rendering/screenshot capabilities viaplaywright.\n - Sanitization: None identified.\n
- These operations are standard for the skill's purpose of design modernization and pose minimal risk when used in a developer's local environment.
Audit Metadata