css-variables-pigment
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and modify user-provided source code files to assist with styling and theme migration.
- Ingestion points: The skill reads TypeScript and React files matching the globs
*.tsx,*.ts,theme*.ts, andtheme*.tsxas specified in the frontmatter. - Capability inventory: The agent is authorized to use
Read,Write, andEdittools to perform code modifications across the project. - Boundary markers: The instructions do not define specific delimiters or guardrails to prevent the agent from potentially obeying malicious instructions embedded within the user's code files.
- Sanitization: No explicit sanitization or validation of the ingested code content is performed before the agent processes and acts upon it.
Audit Metadata