Skills
Navigate
skills/adobe/spectrum-design-data/design-data/Gen Agent Trust Hub

design-data

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the @adobe/design-data-mcp package from the official NPM registry via npx. This is an official resource from a trusted organization.
  • [COMMAND_EXECUTION]: Instructs the user to configure the agent to execute npx -y @adobe/design-data-mcp. This command is used to launch the design system's MCP server and is part of the skill's primary functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests design tokens and component definitions from external sources (NPM or GitHub). While this presents a potential surface for indirect injection, the sources specified (Adobe's official registries and repositories) are trusted.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:03 PM