direction

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Instructions in SKILL.md provide shell commands for the agent or user to execute a local Python script scripts/install-external-skills.py. These commands are used to install companion skills such as hallmark, brandkit, taste-skill, and impeccable into the agent environment.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external design modules through a managed installation script. These resources are part of the vendor's ecosystem (alvarovillalbaa/plugins) and are used to extend design capabilities like brand kit application and UI quality auditing.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from external sources during design consultation tasks.
  • Ingestion points: The references/design-consultation.md file describes a workflow for extracting design styles from a user-provided URL via the hallmark study <source> command.
  • Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the content extracted from external URLs.
  • Capability inventory: The skill environment allows for shell execution of local installation scripts and chaining to other modules that can modify repository files (e.g., creating DESIGN.md).
  • Sanitization: There are no explicit sanitization rules provided for the data fetched from external URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:46 AM