using-design-skills
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user prompts to compose design pipelines and delegates tasks to persistent workers and sub-agents.
- Ingestion points: User prompts processed in
SKILL.mdandevals/evals.jsonto determine routing logic. - Boundary markers: The skill instructs the agent to use "DESIGN CONTEXT" and "SKILL" tags to wrap context when prompting workers in
SKILL.mdsection "DEFER — cross-stage contracts". - Capability inventory: Shell execution via
jqandhead, persistent worker spawning viaagent-tmux, and file writes toDESIGN.mdacross various scripts. - Sanitization: No explicit instructions for sanitizing or escaping user-supplied strings before they are interpolated into delegated worker prompts.
- [COMMAND_EXECUTION]: The skill utilizes shell commands to inspect its environment and configuration.
- Executes
jq -r '.skills|keys[]' ~/.agents/.skill-lock.jsonto retrieve the roster of installed skills. - Executes
head -8on member skill files to check for invocation constraints (disable-model-invocation). - [EXTERNAL_DOWNLOADS]: The skill references an external web resource in
references/design-roles.md. - Provides a link to
https://namethatui.com/as a dictionary reference for UI component naming conventions.
Audit Metadata