design-logo

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection by design, as it ingest data from external project files to define branding constraints.
  • Ingestion points: The skill reads 'Design system handoff directories', 'DESIGN.md', token files (CSS/DTCG), and brand voice documents to extract visual identity markers (Step 1 in SKILL.md).
  • Boundary markers: There are no explicit delimiters or specific 'ignore instructions' warnings mentioned to encapsulate the content read from these external files when they are incorporated into the model prompt.
  • Capability inventory: The skill has the capability to perform network-based image generation by delegating tasks to the 'moai-media' component.
  • Sanitization: The skill does not describe specific sanitization or filtering logic for the ingested brand context before it is converted into prompt constraints.
  • [SAFE]: The skill uses well-defined delegation for its core execution and references reputable design resources.
  • The skill delegates image generation, cost calculation, and model selection to an external component ('moai-media:media-higgsfield-core'), following a modular and controlled execution pattern.
  • External references are provided for documentation purposes and point to well-known design platforms (Recraft, Vistaprint) and project repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:23 PM