ui
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes a workflow for reviewing and analyzing frontend code provided by the user. This creates a surface for indirect prompt injection, where an attacker could place instructions inside the code being reviewed to influence the agent's behavior.
- Ingestion points: UI code, CSS, and TSX files provided by the user for design review (SKILL.md).
- Boundary markers: There are no explicit instructions to the agent to ignore or delimit embedded instructions within the user-provided code.
- Capability inventory: The skill instructs the agent to use the
cdp(Chrome DevTools Protocol) skill to measure and verify the rendered DOM of the user's code (SKILL.md). - Sanitization: There are no instructions for sanitizing or escaping the content of the files being reviewed.
Audit Metadata