skills/alvindean/soniq/epic-design/Gen Agent Trust Hub

epic-design

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local utility scripts, scripts/inspect-assets.py and scripts/validate-layers.js, to assist the agent in analyzing image assets and validating the generated HTML/CSS/JS code for accessibility and performance. These scripts perform localized file operations and data processing without external network dependencies.
  • [EXTERNAL_DOWNLOADS]: The skill references several external JavaScript libraries from a well-known CDN service, including the GreenSock Animation Platform (GSAP), the Lenis smooth scrolling library, and the MotionPathPlugin. These are standard tools in modern web development for creating the high-quality animations described in the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as design briefs and image metadata. While the skill includes instructions for the agent to inspect and judge these assets, this data ingestion represents a potential surface for indirect prompt injection if a user provides maliciously crafted input designed to influence the code generation output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:33 PM