paper-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local scripts for setup and diagnostics. Specifically,
scripts/setup.shexecutesclaude mcp addto register the MCP server, andscripts/health-check.pyusessubprocess.runto callpgrepandclaude mcp listfor environment verification. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted HTML/CSS data, creating a potential surface for indirect prompt injection. Ingestion points include the
write_htmlandget_jsxtools which process external design structures. The skill has the capability to interact with the file system and network via the registered MCP server. No explicit sanitization, filtering, or boundary markers for the ingested DOM content are described. - [EXTERNAL_DOWNLOADS]: The skill refers to external software and libraries associated with the tool, such as the
@paper-design/shaders-reactNode.js package and the Paper Desktop application available atpaper.design/downloads.
Audit Metadata