temps-design-system
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local scripts and development tools using
bunandnode. This includes linting (bun run lint), end-to-end testing (bun run e2e), and a custom record auditing script (scripts/audit-records.mjs). These commands are standard for project validation but involve execution of local scripts. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to manage and install the
@temps-sdk/dspackage usingbun add. This is a standard package management operation for a vendor-owned resource. - [INDIRECT_PROMPT_INJECTION]: The skill reads from various documentation and source files to determine design rules, which could theoretically allow malicious content within those files to influence agent behavior.
- Ingestion points: Documentation files such as
RULES.md,brand-guidelines.md, anddesign-system-handoff.md, along with React component files indesign-system/src/sections/. - Boundary markers: No explicit delimiters or boundary markers are defined to isolate untrusted content from the agent's primary instructions.
- Capability inventory: The skill allows for command execution via
bunandnodefor linting and auditing tasks. - Sanitization: There is no evidence of sanitization or validation of the file content before it is processed by the agent.
Audit Metadata