design-studio

Warn

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: MEDIUMPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The creative-agency sub-skill instructs the agent to bypass standard clarification loops and user confirmation steps. It explicitly states that when given creative latitude, the agent should "not ask clarifying questions" and instead "make a choice and defend it," declaring intent rather than asking for permission. This encourages the agent to override the interactive nature of safety protocols.
  • [REMOTE_CODE_EXECUTION]: The extract-design-system sub-skill uses npx extract-design-system <url> to download and execute an external package from the npm registry at runtime. Additionally, the audit-website skill instructs the user to download and install a binary CLI from an external source at squirrelscan.com/download.
  • [COMMAND_EXECUTION]: The ui-ux-pro-max sub-skill executes a local Python script located at .claude/skills/ui-ux-pro-max/scripts/search.py to generate design system recommendations.
  • [DYNAMIC_EXECUTION]: Multiple sub-skills, including algorithmic-art and web-artifacts-builder, involve generating and executing code artifacts (such as p5.js scripts and React components) at runtime based on user prompts.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from live URLs in the extract-design-system and audit-website modules, creating a vulnerability surface where instructions embedded in external websites could influence agent behavior.
  • Ingestion points: references/skills-catalog.md (processes live URLs for design extraction and site auditing).
  • Boundary markers: None identified to delimit external content from instructions.
  • Capability inventory: Subprocess execution (npx, python3), file writing, and network operations.
  • Sanitization: No sanitization or filtering of external site content is described.
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from external CDNs and services, including unpkg.com for Lucide icons, tailwindcss.com for styling, and images.unsplash.com for visual assets. It also references APIs at sleek.design for mobile screen generation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 1, 2026, 08:14 AM