extract-design-system
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
extract-design-systempackage and the Playwright browser automation tool vianpx. Playwright is a well-known service used for browser-based automation tasks. - [COMMAND_EXECUTION]: Executes shell commands to install Chromium dependencies and run the extraction utility as part of the intended project initialization workflow.
- [PROMPT_INJECTION]: The skill processes content from user-provided websites, creating an indirect prompt injection surface. This is managed by explicit safety boundaries in
SKILL.mdthat instruct the agent to treat extracted content as untrusted, review the output, and require user confirmation before making any project changes. Evidence: 1. Ingestion points:normalized.jsoninSKILL.md; 2. Boundary markers: Safety instructions inSKILL.mdregarding untrusted input; 3. Capability inventory:npxsubprocess calls inSKILL.mdandworkflow.md; 4. Sanitization: Explicit confirmation requirements before file modifications.
Audit Metadata