dym-diagram-design-brand-onboarding-and-profiles
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches brand identity data (colors and fonts) from user-provided URLs to automate the creation of a style guide.
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands such as
mkdirandcatto manage its configuration files and a profile directory located at~/.diagram-design/profiles/. - [INDIRECT_PROMPT_INJECTION]: The skill implements an ingestion surface by processing content from external websites to define design tokens. This potential attack vector is mitigated by strict mapping of extracted data to predefined roles (e.g., paper, ink, accent) and mandatory WCAG contrast validation before saving changes.
Audit Metadata