design-system
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from local codebase files (CSS, Tailwind, styled-components) and external websites via a browser MCP to research design patterns. This architecture is susceptible to indirect prompt injection if an attacker embeds malicious instructions in the processed files or external web pages.
- Ingestion points: Local source code files and external URLs processed via browser MCP.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in the analyzed data.
- Capability inventory: The skill has the ability to write local files (DESIGN.md, design-tokens.json, and design-preview.html) and perform network browsing operations.
- Sanitization: No evidence of sanitization or validation of the ingested external content is mentioned in the skill instructions.
Audit Metadata