design-system-boss
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository content to determine its UI state and delegate tasks. While this creates a surface where repository content could influence sub-agent instructions, the skill implements robust mitigations through explicit standing orders and structured status returns.
- [EXTERNAL_DOWNLOADS]: The skill can optionally run npx shadcn@latest info. This targets the official shadcn utility, a well-known service in the React ecosystem, for the purpose of retrieving project configuration.
- [COMMAND_EXECUTION]: The skill performs local repository analysis using a bundled shell script (scripts/triage.sh) that leverages common development tools such as ripgrep, perl, and node to identify UI patterns and components.
Audit Metadata