paper-ds-components
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on design system synchronization and UI component management. Analysis of the instructions and workflow revealed no patterns of prompt injection, data exfiltration, or unauthorized execution. All referenced paths and tools appear to be internal or vendor-specific components related to the design system workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs such as component source code and Figma files. While this creates a theoretical surface for indirect prompt injection, the instructions limit the agent's capabilities to documentation and UI layout tasks within the Paper environment, which significantly limits any potential impact. No instructions for bypassing safety filters or executing arbitrary code based on these inputs were found.
Audit Metadata