component-family-consistency
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation resource for design system best practices. The instructions and code samples provided focus on UI consistency and do not contain malicious patterns.
- [COMMAND_EXECUTION]: The documentation includes a grep command for auditing local files:
grep -n "cursor" node_modules/tailwindcss/preflight.cssused to verify Tailwind preflight settings. - [DYNAMIC_EXECUTION]: The skill provides code snippets for runtime UI measurement and data processing, including a JavaScript snippet using
getBoundingClientRectand a Python snippet usingPIL.Image. These are intended for visual auditing and do not execute untrusted code. - [INDIRECT_PROMPT_INJECTION]: The skill mentions a diagnostic process for auditing product data via the
get_findingsfunction. While this indicates a data ingestion point, the capability inventory is limited to design analysis and no unsafe system or network capabilities are exposed.
Audit Metadata