website-design-system
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [SAFE]: The skill defines visual standards and performance best practices for website development, such as mobile-first design, modern image formats (WebP/AVIF), and layout shift prevention. It utilizes standard Astro framework features and CSS custom properties for theme management.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by reading from
BRAND.mdto update CSS design tokens inglobal.css. - Ingestion points: Reads color and theme configuration from
BRAND.md. - Boundary markers: None explicitly defined in the provided text.
- Capability inventory: Modifies
global.cssandBRAND.md; no network or subprocess capabilities are utilized. - Sanitization: Not explicitly mentioned, but the output is restricted to CSS token generation.- [OBFUSCATION]: The skill describes a defensive implementation for the resulting website where email addresses are Base64-encoded and reversed to hinder automated scrapers. This is a legitimate security feature for the end-user and is not used to obfuscate the skill's own logic or instructions.
Audit Metadata