setup-design-system
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill in SKILL.md executes local git commands for repository management, including branch creation, rebasing, and stashing.
- [PROMPT_INJECTION]: Indirect prompt injection surface identified in SKILL.md where user-provided design guidelines, color palettes, and Figma specifications are used to generate component code. 1. Ingestion points: Step 1 (User-provided design requirements). 2. Boundary markers: Absent. 3. Capability inventory: Filesystem writes and git command execution. 4. Sanitization: Absent.
Audit Metadata