governance
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
python3 .claude/skills/_ux-ui-shared/scripts/validate_tokens.pyduring the verification step to ensure design token consistency. This is a standard validation practice for design system maintenance. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external project files which could potentially contain malicious instructions if the files are compromised.
- Ingestion points:
.claude/skills/_ux-ui-shared/workflows/governance.mdand.claude/skills/_ux-ui-shared/design-systems/crosswalk.mdare read into the agent context. - Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions embedded within the ingested files.
- Capability inventory: The skill has the capability to execute shell commands (
python3). - Sanitization: No sanitization or validation of the markdown file content is performed before processing.
Audit Metadata