auteur
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves design references and media assets from well-known services to inform its creative process. This includes fetching 3D models and textures from Poly Haven, fonts from Google Fonts, and images from Openverse and Are.na. These downloads are performed by the
source.mjsandmoodboard.mjsscripts to build a project's asset library. - [COMMAND_EXECUTION]: The framework executes several local utility scripts via the
terminaltool to automate design tasks. This includesslopscan.mjsfor CSS/JS linting,shoot.mjsfor multi-breakpoint screenshots, andmotionqa.mjsfor performance profiling. It also utilizes system binaries likeffmpegfor media processing andnpxfor bundling dependencies withesbuild. - [DYNAMIC_EXECUTION]: The
assets.mdreference file describes a process for generating depth maps where the agent creates and executes a short Python script. This script utilizes thetransformerslibrary to perform depth estimation on hero images, which is a core component of the skill's 2.5D visual effect capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted data from external websites, such as gallery descriptions from Awwwards or metadata from stock asset providers. However, the skill implements defensive instructions that direct the agent to treat this data exclusively as non-executable reference material and uses specific parsing logic to extract intended fields.
Audit Metadata