design-studio
Warn
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: MEDIUMPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The
creative-agencysub-skill instructs the agent to bypass standard clarification loops and user confirmation steps. It explicitly states that when given creative latitude, the agent should "not ask clarifying questions" and instead "make a choice and defend it," declaring intent rather than asking for permission. This encourages the agent to override the interactive nature of safety protocols. - [REMOTE_CODE_EXECUTION]: The
extract-design-systemsub-skill usesnpx extract-design-system <url>to download and execute an external package from the npm registry at runtime. Additionally, theaudit-websiteskill instructs the user to download and install a binary CLI from an external source atsquirrelscan.com/download. - [COMMAND_EXECUTION]: The
ui-ux-pro-maxsub-skill executes a local Python script located at.claude/skills/ui-ux-pro-max/scripts/search.pyto generate design system recommendations. - [DYNAMIC_EXECUTION]: Multiple sub-skills, including
algorithmic-artandweb-artifacts-builder, involve generating and executing code artifacts (such as p5.js scripts and React components) at runtime based on user prompts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from live URLs in the
extract-design-systemandaudit-websitemodules, creating a vulnerability surface where instructions embedded in external websites could influence agent behavior. - Ingestion points:
references/skills-catalog.md(processes live URLs for design extraction and site auditing). - Boundary markers: None identified to delimit external content from instructions.
- Capability inventory: Subprocess execution (
npx,python3), file writing, and network operations. - Sanitization: No sanitization or filtering of external site content is described.
- [EXTERNAL_DOWNLOADS]: The skill fetches resources from external CDNs and services, including
unpkg.comfor Lucide icons,tailwindcss.comfor styling, andimages.unsplash.comfor visual assets. It also references APIs atsleek.designfor mobile screen generation.
Audit Metadata