chromatic-init
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements secure handling of sensitive data by instructing the agent to prompt the user for the project token and store it in a gitignored
.envfile or CI secret, explicitly warning against committing the token to version control.- [SAFE]: The skill uses the officialchromaticpackage, which is a well-known service for visual regression testing.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which constitutes an injection surface, though this is necessary for its primary function. - Ingestion points: User-provided project token,
package.jsoncontent, anddesign.manifest.jsoncontent. - Boundary markers: None specified for the token input.
- Capability inventory: Subprocess execution (
npm install,npx chromatic) and file system modifications (package.json,.env,design.manifest.json). - Sanitization: No specific sanitization or validation of the token string is mentioned before it is written to files or used in command line arguments.
Audit Metadata