setup-design-system
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands (git fetch, git checkout, git rebase, git stash, git status, git commit) for local repository management and branch synchronization. These commands are used appropriately for the development workflow and do not represent a security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by ingesting external design guidelines, Figma specifications, and existing project files. This is a fundamental requirement for its primary purpose of design system implementation.
- Ingestion points: SKILL.md (Step 1: Assess Current State, Step 4a: Component Design).
- Boundary markers: Absent.
- Capability inventory: Local Git operations (SKILL.md Step 0, Step 8) and implied project file writes (SKILL.md Step 4b).
- Sanitization: Absent; the workflow relies on visual review checkpoints and manual developer oversight to validate inputs and outputs.
Audit Metadata