design-system-ui-review
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and review external UI code and styles, creating a surface for indirect prompt injection.
- Ingestion points: Relative links in a Gutenberg checkout or remote files in the WordPress/gutenberg GitHub repository.
- Boundary markers: No explicit delimiters or warnings are provided to the agent to ignore instructions embedded in the code under review.
- Capability inventory: The skill utilizes MCP tools (get_components, get_component_details, get_design_tokens) to validate implementation against the design system.
- Sanitization: No sanitization or validation of the external content is specified in the skill instructions.
Audit Metadata