ui-design-system
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured workflows for design token generation and component documentation using local resources.
- [COMMAND_EXECUTION]: The instructions involve executing a local Python script (
scripts/design_token_generator.py) to process hex colors and style presets. This is a standard functional requirement for the skill's purpose and does not involve risky patterns such as remote code execution or privilege escalation. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for ingesting user-provided color values. However, these are strictly used as parameters for design token generation with no evidence of downstream command injection or behavior override vulnerabilities.
Audit Metadata