design-component
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run several local scripts for scaffolding components and performing quality audits. These include
python3 scripts/scaffold_component.pyand various Node.js scripts likeverify_states.mjs,axe_audit.mjs, andverify_responsive.mjslocated within the project's directory structure. - [INDIRECT_PROMPT_INJECTION]: The skill relies on reading multiple external files from the local repository to define its behavior and output quality.
- Ingestion points:
.claude/rules/components.md,CLAUDE.md,accessibility/aria-patterns.md,tokens/*.json, andtaste/design-taste.md(SKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within these files.
- Capability inventory: The agent has the ability to read files, execute shell commands (e.g.,
ls), and run local Python/Node.js scripts. - Sanitization: No input validation or sanitization of the content from these project files is mentioned.
- [DYNAMIC_EXECUTION]: The skill involves the dynamic generation of a "states harness" HTML file which is then executed and tested using Playwright and automated audit scripts. It also includes a JavaScript snippet for performing visual inspections.
- [EXTERNAL_DOWNLOADS]: The documentation suggests the use of
npx skills addandnpx ux-ui-agent-skills initas corrective actions for a user to take if the design kit is missing, which involves fetching and running packages from a remote registry.
Audit Metadata