designkit
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and execute the@google/design.mdpackage from the npm registry. This targets an official tool from a trusted organization for validating and exporting design tokens. - [COMMAND_EXECUTION]: Shell commands are executed via
Bashto interact withgit,gh(GitHub CLI), andnpx. These are used for project auditing, version comparisons, and design system linting. - [PROMPT_INJECTION]: An indirect prompt injection surface exists via the extraction engine. • Ingestion points: UI code files (CSS, templates, and components) read via
ReadandGrep. • Boundary markers: StructuredDESIGN.mdspecification. • Capability inventory:Bash,Write,Edit,Grep,Glob,Read. • Sanitization: Validation is performed by the official@google/design.mdlinter. This activity is required for the skill's primary function of deriving design tokens.
Audit Metadata