brand-systems
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior, bypass safety filters, or extract system prompts. The instructional content is limited to brand development frameworks.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or network operations targeting external domains were identified. Color codes are represented as standard hex values.
- [OBFUSCATION]: Analysis of the skill body and referenced files showed no use of Base64 encoding, zero-width characters, homoglyphs, or hidden text patterns.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. The JavaScript snippets provided in the documentation are static examples of design tokens and type scales.
- [PRIVILEGE_ESCALATION]: The skill does not use administrative commands, permission modifications, or system-level configuration changes.
- [INDIRECT_PROMPT_INJECTION]: While the skill defines templates for processing brand data, it does not include tools or mechanisms that ingest untrusted external data at runtime without sanitization.
- [DYNAMIC_CONTEXT_INJECTION]: No use of shell-command placeholders or loading-time execution patterns was found in the skill metadata or body.
Audit Metadata