penpot-document-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
execute_codetool to perform design automation tasks within the Penpot plugin environment. The provided scripts create and position UI elements like context cards and pins as siblings to the original design. - [DYNAMIC_EXECUTION]: JavaScript templates are populated at runtime with design metadata and user-provided brief information. This is a standard and necessary pattern for the skill's primary function of dynamic UI generation.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external text from users to populate design annotations. 1. Ingestion points: Design brief details and UI observations captured in Phase 1. 2. Boundary markers: Not utilized as the content is treated as static text for display. 3. Capability inventory: Uses
execute_codefor shape creation andexport_shapefor visual verification. 4. Sanitization: Layer names are sanitized via regular expressions in the scripts to prevent naming conflicts or errors.
Audit Metadata