frontend
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
DesignSystemFetchertool intools/design_system_fetcher/fetcher.pydownloads content from remote URLs to extract design tokens such as colors and typography. - [DATA_EXFILTRATION]: The
/frontend reviewcommand inSKILL.mdis designed to send screenshots and source code to the Google Gemini API for visual design analysis. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes design documentation from external URLs; while intended for structured token extraction, this ingestion represents a potential surface for instructions embedded in source data.
- [COMMAND_EXECUTION]: The skill uses
design-lint.shto perform static analysis of project files using grep patterns to detect design anti-patterns. - [DYNAMIC_EXECUTION]: The
fetcher.pyscript dynamically modifies the Python search path usingsys.path.insertto resolve local module dependencies.
Audit Metadata