design-systems-slds-validate
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx @salesforce-ux/slds-linter@latest. This is a legitimate usage of a vendor-provided tool (Salesforce) necessary for the skill's primary function of auditing component compliance. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes source code files (CSS, HTML, JS) provided at the specified component path. This creates a surface for indirect prompt injection if the files contain malicious instructions; however, the skill processes this data using static regex patterns for reporting, which presents a low risk.
Audit Metadata