design-system-ui
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves analyzing external project data to inform UI generation, creating a surface for indirect instructions to enter the agent's context.
- Ingestion points: The agent is instructed to inspect nearby pages, shared components, tokens, theme files, and CSS/Tailwind configurations (SKILL.md).
- Boundary markers: The instructions lack explicit requirements for the agent to treat ingested code or configuration data as untrusted or to use specific delimiters.
- Capability inventory: The agent generates frontend code and suggests architectural changes based on analyzed data.
- Sanitization: No sanitization steps or validation protocols are defined for the data gathered from the user's project environment.
Audit Metadata