muse
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and workflow instructions for managing design systems via tokens. It adheres to established design and development best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external design data (tokens from Figma or JSON files) to modify source code. While this creates an ingestion point for untrusted data, the skill includes explicit auditing steps, lifecycle gates, and human review requirements ('Owner confirms breaking changes') to mitigate risks. This is a low-risk surface inherent to the tool's intended functionality.
- [COMMAND_EXECUTION]: The documentation includes standard development CLI examples (e.g.,
git diff,npm run,npx style-dictionary build). These commands are typical for design token build pipelines and version control operations. - [EXTERNAL_DOWNLOADS]: The skill references reputable external tools and specifications (Style Dictionary, Tokens Studio, W3C DTCG). These are well-known industry standards and do not involve untrusted or suspicious sources.
Audit Metadata