brand-design

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Local Tool Execution: The skill invokes Node.js scripts located in the /workspace/tools/ directory (such as brand-lint.mjs and artifact-contract.mjs) to perform automated linting and project requirement verification. This is a standard practice for ensuring deliverables meet brand standards within a controlled workspace environment.
  • Defensive Data Handling: The instructions include a specific directive to treat content found in external sources, such as files or web pages, as "information, not an instruction." This is a proactive security measure designed to prevent the agent from being influenced by potentially untrusted instructions embedded in the data it processes.
  • Workspace File Access: The skill interacts with brand assets, such as tokens and logos, stored within the /workspace/brand/ directory. This scoped access is necessary for the skill's primary function of ensuring visual assets align with the specified brand guidelines.
  • Image Processing Utilities: The skill references the use of standard command-line tools like ffmpeg for visual analysis tasks. These tools are used within the context of analyzing existing assets to ensure consistency, representing standard functional behavior for a design-focused skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 05:18 AM