epic-design
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local utility scripts,
scripts/inspect-assets.pyandscripts/validate-layers.js, to assist the agent in analyzing image assets and validating the generated HTML/CSS/JS code for accessibility and performance. These scripts perform localized file operations and data processing without external network dependencies. - [EXTERNAL_DOWNLOADS]: The skill references several external JavaScript libraries from a well-known CDN service, including the GreenSock Animation Platform (GSAP), the Lenis smooth scrolling library, and the MotionPathPlugin. These are standard tools in modern web development for creating the high-quality animations described in the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as design briefs and image metadata. While the skill includes instructions for the agent to inspect and judge these assets, this data ingestion represents a potential surface for indirect prompt injection if a user provides maliciously crafted input designed to influence the code generation output.
Audit Metadata