brand-identity

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a set of design instructions and templates. It does not perform any file system operations, network requests, or command executions.
  • [DYNAMIC_EXECUTION]: A JavaScript function for calculating color contrast is provided in references/contrast-and-accessibility.md. This is a utility function for brand designers and does not contain malicious logic, network calls, or dangerous side effects.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided brand parameters (name, mood, audience) to generate identity artifacts. While this is a data ingestion surface, the skill lacks the capabilities (such as shell access or network exfiltration) required to exploit an injection attack. The risk is negligible.
  • [NO_CODE]: Aside from the illustrative JavaScript snippet, the skill consists entirely of Markdown documentation and templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 01:50 AM