design-visual-storyteller

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill workflow includes standard shell commands (cat, ls, grep) to access brand guidelines, audience research, and image assets. These commands are restricted to local project directories (ai/memory-bank/, public/images/) and are consistent with the skill's purpose of analyzing project context.
  • [DATA_EXFILTRATION]: No network operations (such as curl or wget) or attempts to access sensitive system paths (such as .ssh or .env) were detected.
  • [PROMPT_INJECTION]: The instructions do not contain any patterns intended to bypass safety filters, override system constraints, or extract the agent's internal prompt. While the skill ingests content from external files in the memory bank, which is an indirect injection surface, the risk is mitigated by the lack of privileged capabilities or network access.
  • [SAFE]: The skill operates entirely within the local development environment using standard tools and follows its defined identity without introducing persistence or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 02:35 AM
Security Audit — agent-trust-hub — design-visual-storyteller