design-to-canvas
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to interpret and visualize design documentation. It does not request access to sensitive system resources, perform network operations, or utilize high-privilege commands.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external data.
- Ingestion points: The skill reads external files via the @ reference in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present to isolate the external content.
- Capability inventory: The skill is designed to generate a .canvas.tsx UI artifact. The frontmatter disable-model-invocation: true restricts the agent's ability to call additional tools during this process.
- Sanitization: No specific sanitization or filtering of the source document content is described.
Audit Metadata