color-system

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script (scripts/contrast.py) intended to be executed locally by the agent to calculate contrast ratios. The script is self-contained, performs basic mathematical operations on hex color inputs, and does not exhibit any dangerous behaviors such as network access, file system modifications, or shell command injection.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided color data from code literals (Hex, RGB, HSL, OKLCH). While this constitutes an attack surface, the risk is negligible as the data is processed for mathematical analysis or naming convention checks. No capability exists in the provided scripts to execute instructions embedded within this data.
  • [EXTERNAL_DOWNLOADS]: The documentation references external resources from trusted and well-known sources, including the official documentation for Tailwind CSS, Radix UI, MDN, and the W3C. These references are used for educational purposes and do not involve the execution of remote code or the installation of untrusted dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:52 PM