OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to generate UI design tokens by scanning project configuration files and reading a design brief. A minor security risk exists because it ingests untrusted data from a local file without explicit boundaries, which could lead to indirect prompt injection.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed