audit-ai-design-slop
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external artifacts to identify design patterns, creating an inherent attack surface for indirect prompt injection. \n
- Ingestion points: Inspects user-provided screenshots, source code, and rendered pages as instructed in
SKILL.md. \n - Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the analyzed artifacts. \n
- Capability inventory: The skill focus is restricted to generating text-based diagnostic reports and does not define access to tools for network exfiltration, file system modification, or shell command execution. \n
- Sanitization: No sanitization or escaping of external content is specified before the agent performs its analysis.
Audit Metadata