design-system
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation, design templates, and conceptual code snippets for CSS and React. There are no executable scripts, shell commands, or automation files included in the skill package.
- [EXTERNAL_DOWNLOADS]: The documentation references official Google Fonts URLs and well-known design industry resources (such as NN/g, UX Collective, and Fontshare) for informational purposes. These are standard external references for a design-focused skill and do not involve dynamic code execution or suspicious download-then-execute patterns.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or private data were found. The skill emphasizes best practices like using environment variables for secrets in its theoretical examples.
- [PROMPT_INJECTION]: The instructions are focused on guiding the agent through a design workflow and do not contain patterns intended to bypass safety filters or override system-level instructions.
- [SAFE]: The skill provides strict validation criteria for its output, including requirements for accessibility (WCAG contrast ratios) and performance (font self-hosting). The design logic is consistent with its stated purpose.
Audit Metadata