color-audit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions are limited to text analysis of CSS files to extract color tokens. It does not utilize any tools for network communication, file modification, or command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes codebase files which are untrusted ingestion points. Ingestion points: CSS files located within the project codebase. Boundary markers: None identified in the prompt. Capability inventory: The agent is restricted to listing, grouping, and counting color values; no writing or execution capabilities are requested. Sanitization: No specific sanitization of the CSS content is described.
Audit Metadata