migrate-design-system

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill defines a clear and legitimate workflow for design system interop and migration, scoped to local project files and common design tools.\n- [COMMAND_EXECUTION]: The skill utilizes local scripts and commands to perform safety and quality checks.\n
  • Evidence: Use of scripts/contrast.py, a11y-audit, and design-code for validation and output rendering.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface through local markdown files, though the risk is localized to the design token mapping process.\n
  • Ingestion points: design-systems/interop-protocol.md and design-systems/crosswalk.md.\n
  • Boundary markers: None identified in the skill instructions.\n
  • Capability inventory: Local file access and execution of scripts/contrast.py, a11y-audit, and design-code.\n
  • Sanitization: No explicit sanitization or validation of the input file content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 11:02 AM