design-system-generator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The 'Create your Own Theme' feature in
SKILL.mdallows user-provided descriptions to influence the generation of theme specifications. - Ingestion points: User descriptions and inputs are used to generate new color and font pairings in the 'Create your Own Theme' section of
SKILL.md. - Boundary markers: The instructions do not define delimiters or specific 'ignore embedded instructions' markers to isolate user-provided theme data from the agent's instructions.
- Capability inventory: The skill involves reading theme files from the
themes/directory and applying these styles to artifacts, which typically utilizes file system access. - Sanitization: There is no mention of sanitization, validation, or filtering of user-supplied theme descriptions prior to processing.
Audit Metadata