design-prim
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute 'npx impeccable install' to configure the project environment for UI auditing and redesign tasks.
- [EXTERNAL_DOWNLOADS]: It retrieves and installs necessary developer utilities through the Node.js package runner as part of its initialization sequence.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted project data (source code and route configurations) to perform its redesign functions. 1. Ingestion points: Project root directory and router/pages configurations. 2. Boundary markers: The instructions do not define specific prompt delimiters for the ingested code context. 3. Capability inventory: Includes shell command execution (npx), file system modifications (via hallmark redesign), and browser automation (Playwright). 4. Sanitization: The workflow incorporates a three-layer validation system (slop-test, impeccable audits, and a visual-qa engine) to verify that generated UI changes meet accessibility and consistency standards.
Audit Metadata