design-system-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external configuration files, creating a potential surface for indirect prompt injection attacks where malicious instructions could be embedded in data fields.
- Ingestion points: The skill reads
tailwind.config.js,tokens.json, CSS custom property files, and theme files for MUI and Chakra UI. - Boundary markers: No explicit delimiters or instructions to ignore embedded natural language commands within the configuration data are present.
- Capability inventory: The skill is restricted to analyzing values and generating reports; it contains no subprocess calls, file-write operations, or network exfiltration capabilities.
- Sanitization: There is no evidence of input validation or sanitization for the content parsed from external files.
Audit Metadata