enforce-design-ci
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
@memi-design/clipackage from the npm registry and references thememi-design/memiGitHub Action. - [REMOTE_CODE_EXECUTION]: The skill executes the
@memi-design/clipackage usingnpxto perform automated design checks and runs remote actions in the GitHub environment. - [COMMAND_EXECUTION]: The skill runs shell commands to initialize settings and execute the CI tool locally.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository content to detect design regressions.
- Ingestion points: The local repository worktree is scanned by the CLI tool.
- Boundary markers: None specified; the tool relies on deterministic logic for the quality gate.
- Capability inventory: File system access, shell execution via
npx, and artifact generation (SARIF, reports). - Sanitization: The tool produces structured reports intended for human review.
Audit Metadata