design
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided design briefs to guide the generation of UI artifacts, which introduces a surface for indirect prompt injection.
- Ingestion points: User-supplied briefs processed according to the task modeling steps in
SKILL.md. - Boundary markers: No explicit delimiters or instructions are used to separate user data from the core design instructions.
- Capability inventory: Writing HTML/SVG files and executing the
scripts/design-check.mjstool which interacts with a browser. - Sanitization: No specific sanitization or filtering of the brief content is described.
- [DYNAMIC_EXECUTION]: The
scripts/design-check.mjsscript performs dynamic execution by using theplaywrightlibrary to run a headless browser and execute JavaScript viapage.evaluate(). This is used to audit generated artifacts for design floors such as text contrast and touch target sizing. - [COMMAND_EXECUTION]: The agent is instructed to run a local Node.js script (
scripts/design-check.mjs) to verify its output, which is a routine practice for development and design workflows. - [EXTERNAL_DOWNLOADS]: The verification script has a functional dependency on the
playwrightandplaywright-corelibraries. These are standard, well-recognized tools for browser automation.
Audit Metadata