design-html
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill identifies when the Bun runtime is missing and offers to install it using a piped shell command from its official domain. The installation is secured by a hardcoded SHA-256 checksum integrity check to ensure the script has not been tampered with.
- [DATA_EXFILTRATION]: The skill incorporates an optional telemetry system and an 'Artifacts Sync' feature that can publish project data to a private GitHub repository. Both capabilities are gated by interactive prompts and require explicit user approval before any data is sent externally.
- [COMMAND_EXECUTION]: The preamble executes a suite of local utility scripts and evaluates their output to manage environment configurations, update checks, and session tracking within the author's 'gstack' framework.
- [EXTERNAL_DOWNLOADS]: The generated HTML output can import the Pretext layout library from a well-known CDN (esm.sh) if a local vendored version is not available in the project environment.
- [PROMPT_INJECTION]: The instructions contain guidance for the agent to prioritize the skill's specific multi-step workflow over default behaviors during complex planning tasks, which is intended to ensure consistency in the design finalization process.
Audit Metadata