design-tokens

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes existing theme and token files from the environment to generate its output, creating a surface where instructions hidden in those files could influence the agent.
  • Ingestion points: The execution flow requires reading existing tokens or theme files (SKILL.md).
  • Boundary markers: No delimiters or explicit instructions are provided to the agent to disregard instructions found within the ingested data.
  • Capability inventory: The skill uses a uiux_generate_tokens tool and produces configuration files in formats like Tailwind, CSS, and JSON.
  • Sanitization: There is no documentation of schema validation or content sanitization for the input data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:05 PM