design-md
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@google/design.mdpackage from the npm registry. This is the official toolset for managing the DESIGN.md specification. - [COMMAND_EXECUTION]: The skill executes shell commands via
npxto perform design token validation (linting), version diffing, and exporting to formats like Tailwind CSS or W3C DTCG JSON. These commands operate on local DESIGN.md files. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied design specifications, which constitutes a potential ingestion point for untrusted data. However, it mitigates risk through the following:
- Ingestion points: Reads existing
DESIGN.mdcontent provided by the user or found in the project directory. - Boundary markers: None explicitly defined in the prompt instructions, though the skill organizes data into a formal YAML/Markdown structure.
- Capability inventory: Employs
write_filefor file creation andnpxfor executing the validation CLI. - Sanitization: Relies on the
@google/design.md lintcommand to structurally validate tokens and markdown headings before processing.
Audit Metadata