design-system
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of design guidelines, token strategies, and reference documentation. No executable code, scripts, or sensitive system operations were identified during the analysis.
- [EXTERNAL_DOWNLOADS]: The skill templates reference well-known font delivery services, including Google Fonts (
fonts.googleapis.com) and Fontshare (api.fontshare.com). These references are standard design practices for font loading and are documented neutrally as they target established service providers. - [INDIRECT_PROMPT_INJECTION]: The skill includes logic to process information from an identity brief and external inspiration websites to generate a
design-system.mdfile. While this involves processing external data, the skill mitigates risks by enforcing a strict canonical output format, specific color models (OKLCH), and explicit exclusions for forbidden font families. The lack of dangerous capabilities (such as shell execution or network writes) in this skill makes the surface for exploitation negligible.
Audit Metadata