design-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to assemble design handoff documentation from local project configuration files. All operations occur within the local file system, and the generated output is intended for manual human review and pasting into an external design tool.
- [INDIRECT_PROMPT_INJECTION]: (1) Ingestion points: The skill reads project data from .moai/project/brand/brand-voice.md and visual-identity.md to populate design templates. (2) Boundary markers: The generated output is organized using standardized Markdown headers defined in the references/prompt-template.md file. (3) Capability inventory: Operations are limited to local file system writes and user interaction via the AskUserQuestion tool. (4) Sanitization: The process is human-gated, requiring the user to manually review and paste the generated content into an external service, which mitigates the risk of automated injection attacks.
Audit Metadata