direction
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Instructions in
SKILL.mdprovide shell commands for the agent or user to execute a local Python scriptscripts/install-external-skills.py. These commands are used to install companion skills such ashallmark,brandkit,taste-skill, andimpeccableinto the agent environment. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external design modules through a managed installation script. These resources are part of the vendor's ecosystem (
alvarovillalbaa/plugins) and are used to extend design capabilities like brand kit application and UI quality auditing. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from external sources during design consultation tasks.
- Ingestion points: The
references/design-consultation.mdfile describes a workflow for extracting design styles from a user-provided URL via thehallmark study <source>command. - Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the content extracted from external URLs.
- Capability inventory: The skill environment allows for shell execution of local installation scripts and chaining to other modules that can modify repository files (e.g., creating
DESIGN.md). - Sanitization: There are no explicit sanitization rules provided for the data fetched from external URLs.
Audit Metadata