ui-design-system

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or associated scripts. All operations are focused strictly on UI design system generation and documentation.
  • [DATA_EXFILTRATION]: The skill does not access sensitive local files, credentials, or environment variables. No network operations or external data transmissions are performed by the provided scripts.
  • [REMOTE_CODE_EXECUTION]: The design_token_generator.py script uses only standard Python libraries (json, colorsys, sys) and does not perform any remote downloads or dynamic execution of external code.
  • [COMMAND_EXECUTION]: The script does not utilize subprocesses or shell commands. User-provided parameters for brand color and style are handled as static inputs for mathematical calculations and string formatting.
  • [PROMPT_INJECTION]: The skill contains no instructions to override agent behavior or safety filters. While it accepts command-line arguments for design parameters, these are not interpolated into prompts or executed as instructions, mitigating the risk of indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 07:13 AM
Security Audit — agent-trust-hub — ui-design-system