ui-color-palette-framer
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a comprehensive color management workflow for Framer. It uses specialized tools to extract design data (colors and styles) and generate artifacts (previews and styles) on the Framer canvas.
- [DATA_EXPOSURE]: The skill accesses Framer project data via XML extraction tools (
getProjectXml,getSelectedNodesXml). This data is processed locally within the agent's context to identify color configurations. The user is prompted to review and assign roles to the extracted colors before they are used, which serves as a security control against unintended data processing. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Framer project XML. While this presents a potential surface for indirect injection if the XML contained malicious instructions, the risk is mitigated because the skill specifically parses for color-related attributes (hex codes, RGB patterns) and includes a mandatory human-in-the-loop step where the user must confirm the extracted colors and assign them roles.
Audit Metadata