design-system
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install '@storybook/addon-a11y' and '@storybook/test-runner' using the standard npm package manager. These are well-known, widely used accessibility testing tools for the Storybook ecosystem.
- [COMMAND_EXECUTION]: The skill includes shell commands (
findfor Unix-like systems andGet-ChildItemfor PowerShell) to help the agent locate design token files (e.g.,tokens.json,tailwind.config.js,theme.ts) within a project directory. These are benign utility commands for file discovery. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local project configuration files (JSON, CSS, JS). While these files constitute an external data surface, the skill does not possess capabilities that could be exploited by malicious content within those files, such as network exfiltration or arbitrary code execution.
Audit Metadata