design-system-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches content from vendor-owned domains and repositories, including
https://docs.reticle.sh/llms.txtandgithub.com/reticlehq/reticle. These resources are used for retrieving documentation and additional tool configuration. - [INDIRECT_PROMPT_INJECTION]: The skill describes functionality that reads computed styles and animation data from a running application. This creates an attack surface where instructions could theoretically be embedded in the application UI data, but this is a low-risk surface inherent to the tool's primary diagnostic purpose.
- [COMMAND_EXECUTION]: The skill defines calls to tools like
reticle_lookandreticle_run. These are specialized inspection tools designed for UI analysis and do not appear to allow arbitrary command execution.
Audit Metadata