design-ui
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external repository content which presents a potential surface for indirect prompt injection. This is inherent to the skill's purpose.
- Ingestion points: Target repository instructions, UI source, design systems, and screenshots (SKILL.md, Step 1).
- Boundary markers: None; the agent is directed to follow repository instructions.
- Capability inventory: Modifying repository files and calling external skills like $imagegen and $add-issue.
- Sanitization: None mentioned.
- [SAFE]: No instances of prompt injection, obfuscation, or unauthorized remote code execution were found.
Audit Metadata