ui-aesthetic-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script,
scripts/scaffold_design_system.py, to automate the creation of project directory structures. This is a primary functional requirement of the skill and is initiated by specific user commands provided in the documentation. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection attack surface because it processes untrusted external data (reference websites and Figma boards) to generate design system layers and AI instructions. While the instructions provide a 'REFERENCE_BOARD_CHECKLIST.md' for sanitization and abstraction, content within these external sources could theoretically contain instructions designed to influence agent behavior.
- [SAFE]: All external references, including links to GitHub and the TomeVault domain, originate from the identified author (amazingchow) or the trusted distributor (TomeVault), and are used strictly for documentation and source attribution.
Audit Metadata