brand-visual-generator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions and design principles. It does not contain any binaries, scripts, or tool calls that would allow for unauthorized actions or code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface by instructing the agent to read local project context files (e.g., .cursor/project-context.md) for brand information. 1. Ingestion points: .claude/project-context.md and .cursor/project-context.md. 2. Boundary markers: Absent. 3. Capability inventory: The skill is restricted to generating text-based design specifications and templates. 4. Sanitization: Absent. The risk is assessed as safe because the skill lacks exploitable capabilities such as network exfiltration, command execution, or access to sensitive user data.
Audit Metadata