designcraft-cli-setup
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a native binary archive from GitHub releases (github.com/storytold/designcraft) as part of its setup process. Integrity is ensured by verifying both the archive and the extracted binary against SHA256 hashes defined in a local runtime.lock.json file.\n- [COMMAND_EXECUTION]: The skill executes the downloaded native binary to perform design-related tasks. Commands are executed using subprocess.run without a shell, and the wrapper script enforces an allowlist of permitted subcommands to minimize the attack surface.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON-based plans and implements deep JSON validation, including checks for duplicate fields and schema compliance, to mitigate risks from malformed or malicious task definitions.\n- [SAFE]: The implementation includes strong defensive measures such as ZipSlip protection during extraction (preventing path traversal) and the explicit avoidance of elevated privileges (sudo) or modifications to system environment variables like PATH.
Audit Metadata