design-system
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust design system architecture with no malicious intent. It includes internal validation tools to ensure consistency and compliance with design tokens.
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runwithin its validation wrappers and regression tests. These calls are benign as they are restricted to executing internal Python and Node.js scripts using local paths and standard interpreters. - [EXTERNAL_DOWNLOADS]: The skill references assets from well-known and trusted services, including Google Fonts, jsDelivr (for Chart.js), and Pexels (for slide backgrounds). These references are standard for web-based presentation tools.
- [INDIRECT_PROMPT_INJECTION]: The slide generation scripts ingest data from JSON files. The skill correctly identifies this as a potential attack surface and mitigates risks by applying HTML escaping and validating URL protocols (e.g., restricted to http/https/relative paths) before embedding content into templates.
Audit Metadata