ui-layout-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided image data that could contain malicious text instructions.
- Ingestion points: User-provided UI screenshots (as described in SKILL.md).
- Boundary markers: The skill mandates a specific markdown output structure which provides a partial boundary, but lacks explicit instructions to ignore text embedded in the images.
- Capability inventory: None. The skill does not possess tools for network access, file system modification, or command execution.
- Sanitization: The skill does not perform any sanitization or filtering on text recognized from screenshots.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any functional scripts, code snippets, or configuration for external tools.
Audit Metadata