design-negotiation
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and shell commands to download and install a package from 'https://github.com/Owl-Listener/designer-skills'. This repository is community-owned and should be reviewed for safety.
- [COMMAND_EXECUTION]: 'SKILL.md' includes shell scripting for environment checks, using commands like 'grep' to verify existing installations.
- [INDIRECT_PROMPT_INJECTION]: The skill's intended use-case involves processing 'stakeholder pushback', which creates an ingestion surface for untrusted external instructions.
- Ingestion points: Stakeholder feedback provided during design negotiations.
- Boundary markers: None present in the stub files.
- Capability inventory: Local command execution and external package installation.
- Sanitization: No input validation or sanitization is implemented in these metadata files.
Audit Metadata