ui-color-palette-framer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes XML data representing the Framer project structure and selected nodes, creating a potential surface for indirect prompt injection if the design file contains malicious instructions.
- Ingestion points: XML strings are ingested in references/extract-source-colors.md and references/extract-styles-colors.md through project and selection retrieval tools.
- Boundary markers: There are no explicit boundary markers or instructions to treat the ingested XML as untrusted data.
- Capability inventory: The skill has permissions to create and update elements on the Framer canvas and manage local color styles.
- Sanitization: No specific sanitization of the XML input is described, as the skill focuses on parsing for hex and RGB color patterns.
Audit Metadata