design-taste
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process untrusted data from user-provided external sources, such as Figma files, Storybook documentation, and design system tokens.
- Ingestion points: External design system documentation, Storybook links, and Figma file paths provided by the user (SKILL.md, Step 1a).
- Boundary markers: The instructions do not specify the use of delimiters or provide warnings to the agent to ignore instructions that might be embedded within the design documentation being reviewed.
- Capability inventory: The skill has the capability to write markdown files to the local file system (docs/designpowers/taste/) and modify the project's design-state.md file (SKILL.md, Step 3 and 4).
- Sanitization: There are no requirements for sanitizing or validating the content extracted from external design references before it is interpolated into project documents.
Audit Metadata