design-systems

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads design configuration files (DESIGN.md, tokens.json, tailwind.css, bundle.zip) from https://api.agent-ds.oday-bakkour.com. This is the core functionality for fetching design system artifacts.
  • [COMMAND_EXECUTION]: The skill uses shell and Python scripts (scripts/fetch_design_md.sh and scripts/fetch_design_md.py) to perform the downloads using standard tools like curl and urllib.request. The scripts include validation for the artifact types to prevent arbitrary file downloads.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external design files which are intended to influence the agent's UI generation behavior. The instructions include guidelines for the agent to follow the design tokens and rules defined in these files. This is a legitimate application of the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 03:28 PM
Security Audit — agent-trust-hub — design-systems