visual-design-system
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and utilizes tools, specifications, and configurations from trusted organizations and well-known technology services. Each instance is handled as a standard dependency or reference.
- Fetches and uses the
DESIGN.mdspecification and CLI from a repository associated with Google (github.com/google-labs-code/design.md). - References design system integration techniques provided by Vercel Labs (
github.com/vercel-labs/design-systems-to-agent-skills). - Recommends industry-standard development and testing tools including
axe-core,Playwright,ESLint, andStylelint. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external brand tokens and design specifications, which constitutes a vulnerability surface where malicious instructions could be embedded in the data files.
- Ingestion points: Processes
DESIGN.md(YAML/Markdown) andtokens.jsonfiles to guide the agent's UI generation tasks as described inreferences/design-md-and-enforcement.md. - Boundary markers: The skill encourages structured YAML for tokens but does not explicitly implement delimiters to isolate instructions from data within these files.
- Capability inventory: The skill possesses capabilities for UI code generation, writing files to the repository, and executing CLI tools for linting and visual testing.
- Sanitization: The skill advocates for technical enforcement mechanisms such as TypeScript discriminated unions and strict linting rules like
no-arbitrary-colorsto validate inputs and prevent drift.
Audit Metadata