sb-health
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/validate-design-system.shcontains an inline Python script that is executed by piping a heredoc into thepython3interpreter. This script processes analysis findings and performs an atomic file write to.storybook/design-system-health.json. - [INDIRECT_PROMPT_INJECTION]: The skill processes
DESIGN.md, which is explicitly described inSKILL.mdandscripts/validate-design-system.shas untrusted and a claim that can drift or lie. It also emits a prompt for an LLM sub-agent to perform semantic checks on naming drift and style conflicts across project files. Ingestion points:DESIGN.mdand project source files (CSS/TSX). Boundary markers: None. Capability inventory: File system write access and shell command execution via theBashandWritetools. Sanitization: Uses standard text processing tools likegrepandawk. - [COMMAND_EXECUTION]: The bash scripts execute various system commands and developer tools, including
npx stylelint,grep,find, andpython3, to perform scanning and file scaffolding within the.storybook/directory.
Audit Metadata