token-mapping
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external project files, such as token definitions and source code, to generate mapping reports.
- Ingestion points: Token files, theme entries, and product source code files (SKILL.md).
- Boundary markers: None explicitly mentioned to delimit or ignore instructions within processed files.
- Capability inventory: Restricted to reading files, executing
git status, and running theoklch.mjsutility script (SKILL.md, references/mapping-rules.md). - Sanitization: The skill normalizes values (e.g., converting colors to OKLCH) using a script before processing, which serves as a validation step for style data.
- [COMMAND_EXECUTION]: The skill executes the
git statuscommand to ensure no files are modified and runs a local vendor-provided scriptbuild-design-system/scripts/oklch.mjsto perform color space conversions.
Audit Metadata