designcraft-poster-layout
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate instructions for graphic design workflows. The included Python script (
scripts/write_script.py) is a utility that transforms JSON layout templates without employing any dynamic code execution or dangerous functions. - [COMMAND_EXECUTION]: The skill guides the agent to use the provided Python script and the external
designcraft-clitool. These operations are restricted to generating and processing design files within the project directory. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided activity details, URLs, and images. This represents a standard input surface for a design tool. The instructions include explicit safeguards, such as requiring the agent to verify the integrity of generated QR codes and check text for overflows, which helps mitigate risks associated with untrusted data.
- [EXTERNAL_DOWNLOADS]: The skill documentation mentions an installation command for a related editor skill (
designcraft-editor) provided by the same author. This is a functional recommendation for extending the agent's design capabilities rather than a hidden or unauthorized download.
Audit Metadata