penpot-component-factory
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides JavaScript code templates that are executed via the
execute_codetool. These templates automate the creation of Penpot Boards, components, and variants using the Penpot Plugin API. The scripts interact with the design canvas using global objects likepenpotandpenpotUtilsto facilitate design system automation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user specifications (Ingestion: Phase 5 Brief Contract) and incorporates them into script generation. While it lacks automated sanitization or boundary markers for these inputs, the risk is mitigated by the required manual review phases and the skill's specific focus on design automation. The capability to execute code is restricted to the Penpot plugin environment and is used to automate repetitive design tasks.
- [SAFE]: No malicious patterns such as credential harvesting, obfuscation, or unauthorized network operations were detected. All external naming conventions and tools align with the stated Penpot vendor context. Technical warnings regarding file corruption reflect legitimate platform constraints rather than security threats.
Audit Metadata