design-systems
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads design configuration files (DESIGN.md, tokens.json, tailwind.css, bundle.zip) from
https://api.agent-ds.oday-bakkour.com. This is the core functionality for fetching design system artifacts. - [COMMAND_EXECUTION]: The skill uses shell and Python scripts (
scripts/fetch_design_md.shandscripts/fetch_design_md.py) to perform the downloads using standard tools likecurlandurllib.request. The scripts include validation for the artifact types to prevent arbitrary file downloads. - [INDIRECT_PROMPT_INJECTION]: The skill processes external design files which are intended to influence the agent's UI generation behavior. The instructions include guidelines for the agent to follow the design tokens and rules defined in these files. This is a legitimate application of the skill's purpose.
Audit Metadata