status-from-accent
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to run the
@basiclines/rampapackage usingnpx, which fetches and executes the vendor's own color generation utility from the npm registry. - [COMMAND_EXECUTION]: The skill provides specific command-line instructions for the
rampaCLI tool to calculate square harmonies, generate color ramps, and output CSS variables based on a provided brand color. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests user-supplied brand color strings (e.g., hex codes like
#3b82f6) as arguments for the color calculation commands inSKILL.md. - Boundary markers: None present; the input is treated as a literal color value for the CLI tool.
- Capability inventory: The skill uses
npxto execute the@basiclines/rampautility on the local system. - Sanitization: Input is passed directly to the color utility; the attack surface is limited to the arguments accepted by the specific color tool.
Audit Metadata