design-system
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute a PowerShell audit command using
Get-ChildItemandSelect-Stringto locate hardcoded values in source files. - [COMMAND_EXECUTION]: Instructs the agent to utilize a local script,
tools/snap.ps1, for capturing UI snapshots to compare different accent color choices. - [INDIRECT_PROMPT_INJECTION]: The skill processes project requirements from
docs/BRIEF.mdto influence design decisions and token generation. - Ingestion points: Reads the
## Looksection ofdocs/BRIEF.mdas specified in the first step. - Boundary markers: Absent; the content of the brief is treated as direct instruction for styling choices.
- Capability inventory: Includes file system modifications to C#, XAML, and documentation files, execution of local scripts (
tools/snap.ps1), and invocation of external design tools (design-kit,design-from-app,build-and-verify). - Sanitization: None; the agent is expected to interpret the brief as-is to apply design changes.
Audit Metadata