sprintify-ui
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use WebFetch to retrieve supplementary component documentation and TypeScript type definitions from the vendor's official product domain (ui.sprintify.app). This ensures the agent has access to detailed prop and event specifications not explicitly listed in the skill file.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to the ingestion of external text documentation at runtime. * Ingestion points: Text files fetched from https://ui.sprintify.app/llm/. * Boundary markers: Absent; the agent is directed to retrieve and use the content without specific delimiter instructions. * Capability inventory: The fetched data is used to generate UI component code and application logic. * Sanitization: No specific validation or sanitization is defined for the documentation content fetched from the remote source.
Audit Metadata