design-system
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted data from external URLs during UI audits and competitor research, as well as from the local codebase.
- Ingestion points: The skill scans the local codebase (CSS, Tailwind, styled-components) and visits external URLs provided via the
--urlparameter or during competitor research. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious instructions embedded in CSS comments, HTML, or external web page content.
- Capability inventory: The skill utilizes a browser tool for network reads and performs file writes (DESIGN.md, design-tokens.json, design-preview.html) to the local filesystem.
- Sanitization: There is no evidence of sanitization or filtering of external content before it is processed by the agent.
Audit Metadata