design-to-react
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external design specifications (Figma, Sketch, Penpot), serving as an ingestion point for untrusted data.
- Ingestion points: Design elements and frames mentioned in the conversion workflow.
- Boundary markers: Absent; the instructions do not provide explicit delimiters or warnings to ignore instructions that might be embedded in the design data.
- Capability inventory: None; the skill focuses on code generation and does not utilize shell execution, file system writes, or network access tools.
- Sanitization: Absent; no instructions are provided for validating or escaping design data before it is converted into code components.
Audit Metadata