brand
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/sync-brand-to-tokens.cjsutilizeschild_process.execSyncto execute a local Node.js script for design token generation. The execution path is hardcoded and points to a relative location within the project directory.\n- [PROMPT_INJECTION]: Thescripts/inject-brand-context.cjsscript aggregates brand guidelines fromdocs/brand-guidelines.mdinto a structured prompt block for the agent. This creates a surface for indirect prompt injection.\n - Ingestion points: Content is dynamically read from
docs/brand-guidelines.mdduring execution.\n - Boundary markers: The script wraps extracted data with explicit section headers such as
BRAND CONTEXT:andBRAND VOICE:.\n - Capability inventory: The skill has permissions for file system operations and execution of specific local scripts.\n
- Sanitization: Extracted markdown content is not escaped or validated before being included in the prompt output.
Audit Metadata