open-design
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches its core components from
github.com/nexu-io/open-designand referencesgithub.com/akillness/oh-my-skillsfor skill management. Both sources are associated with the tool's official development and the skill's author context.\n- [COMMAND_EXECUTION]: Requires the agent to perform environment setup usinggit clone,corepack enable, andpnpm installto prepare the local environment.\n- [COMMAND_EXECUTION]: Operates by launching local services and daemons via commands likepnpm tools-dev startandpnpm tools-dev run web.\n- [COMMAND_EXECUTION]: Designed to delegate generation tasks to other locally-installed coding agents such as Claude Code, Cursor, and Gemini CLI.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes untrusted user prompts to generate code and media artifacts. Evidence: (1) Ingestion point: User prompt for generation mode in SKILL.md. (2) Boundary markers: Not specified. (3) Capability inventory: File write, edit, and shell access viaBash,Write, andEdittools. (4) Sanitization: Includes a 'Turn 1 discovery form' to validate parameters before execution.
Audit Metadata