design-md
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a repository from a well-known organization (
github.com/google-labs-code/skills) to obtain additional scripts and assets. This reference is documented for user inspection and installation. - [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to manage
DESIGN.mdfiles, which creates a potential surface for indirect prompt injection if the processed documentation contains malicious instructions. - Ingestion points: Content within
DESIGN.mdor design token definitions. - Boundary markers: None present in the skill instructions.
- Capability inventory: File system management and creation (implied).
- Sanitization: No explicit sanitization or validation of the ingested design data is described.
Audit Metadata