modular-scale-typography
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is primarily instructional documentation containing mathematical formulas for font scaling and static configuration examples for CSS, Tailwind CSS, and JSON design tokens. It does not include executable scripts, binaries, or automated installers.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns to identify and process typography-related files (e.g., CSS, SCSS, and JSON tokens). While processing external files represents a potential surface for indirect prompt injection (where malicious instructions could be embedded in design file comments), the skill's scope is strictly limited to extracting typographic properties.
- Ingestion points: Path patterns targeting
**/*.css,**/*.scss,**/*.tokens.json, and directories related to themes and design systems. - Boundary markers: No specific delimiters or warnings for processed data are defined in the documentation.
- Capability inventory: The skill does not implement subprocess calls, network writes, or file-writing operations; it focuses on retrieval and configuration generation.
- Sanitization: No explicit sanitization or filtering of design token content is described.
Audit Metadata