create-design-md
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@google/design.mdpackage. This is a trusted utility provided by Google used for linting and exporting design documentation. - [COMMAND_EXECUTION]: Shell commands are executed via
npxto perform specific tasks:npx @google/design.md specfor specification checks,npx @google/design.md lintfor structural validation, andnpx @google/design.md exportfor generating output files. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes untrusted content from public URLs (DOM, styles, and CSS) and local source code repositories to reconstruct design systems.
- Ingestion points: Publicly accessible websites in URL mode and local source files in Repository mode (SKILL.md).
- Boundary markers: The instructions mandate a strict YAML/Markdown schema and require validation via an external linter, providing a structural boundary for processed data.
- Capability inventory: The agent is authorized to write to the filesystem (
DESIGN.md) and execute shell commands vianpx(@google/design.md). - Sanitization: The skill requires mandatory structural linting and validation passes using the
@google/design.mdtool before any content is finalized or reported.
Audit Metadata