ui-color-palette-generate-semantic-code

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests complex user-provided objects (base, themes, system) to generate code, which represents an indirect prompt injection surface.
  • Ingestion points: Input parameters for the generate_code tool in SKILL.md.
  • Boundary markers: Absent; the skill does not instruct the agent to use specific delimiters or ignore instructions within the input data.
  • Capability inventory: Invokes the ui-color-palette:generate_code tool and suggests using gh-cli or gitlab-cli-skills for file persistence.
  • Sanitization: None described; the skill assumes valid configuration objects from the user or context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 12:49 PM