design-kit
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run local PowerShell scripts for project maintenance and verification.
tools/grid-lint.ps1is used to ensure code follows design grid rules.tools/snap.ps1is used to generate UI snapshots of the component gallery for review.- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where values from an external source (measurements from an existing app) are used to populate the design system specification.
- Ingestion points: Measurements from the
design-from-apptool are recorded indesign/KIT.mdand then used as tokens in XAML/C# code. - Boundary markers: Absent; measurements are interpreted as numerical values and strings for the kit spec.
- Capability inventory: The skill has the capability to write XAML/C# files and execute local PowerShell scripts (
tools/snap.ps1,tools/grid-lint.ps1). - Sanitization: Not explicitly implemented; the agent is expected to interpret measurements as design tokens.
Audit Metadata