page-solution-design
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides a structured workflow for product design and documentation. It demonstrates a high level of security awareness by explicitly instructing the AI to desensitize local credentials and sensitive data (such as API keys and tokens) when reading project configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as user requirements and project service outputs to generate design specifications. While this creates a standard ingestion surface for indirect prompt injection, the skill includes explicit boundary instructions to ensure sensitive data is not leaked in the resulting output.
- [DYNAMIC_EXECUTION]: The skill utilizes a layout verification script (
scripts/check-layout.js) intended for execution in a browser environment via tools like Playwright. This is a legitimate functional requirement for ensuring UI quality and does not involve remote code execution or unauthorized access.
Audit Metadata