Security audit
nielsen-ui-review
Security checks for vulnerabilities and agentic risk
Overview
This is an instruction-only UI review skill that stays focused on critiquing user-provided screenshots and does not request system access, credentials, persistence, or code execution.
Safe to install for UI/UX review tasks. Only share screenshots or product context you are comfortable having the agent analyze, especially if they include unreleased designs, customer data, internal metrics, or proprietary workflows.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.