direct
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a protocol for the palette selection process that generates a local HTML file and instructs the agent to open it in the default system browser using platform-specific commands such as
open(macOS),xdg-open(Linux), orstart(Windows). This is a functional requirement for providing a visual interface to the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content extracted from external websites to inform the redesign process. It includes several mitigation strategies, such as a 'Mode-detection' logic that prioritizes brand-faithful inheritance (Mode A) over total rebrands, and an 'Anti-toolbox audit' designed to detect and remove defaults that may be influenced by processed data. The skill also enforces accessibility standards (WCAG AA) and design constraints (spacing floors) to ensure output integrity.
Audit Metadata