moai-domain-brand-design
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from local brand identity files and potentially external Figma URLs, creating a surface for indirect prompt injection. * Ingestion points: Reads
.moai/project/brand/visual-identity.mdand accepts public Figma file URLs. * Boundary markers: The skill checks for_TBD_completion markers but lacks explicit boundary delimiters or 'ignore' instructions for the data being processed. * Capability inventory: UsesRead,Write,Edit,Grep, andGlobtools to manage project files and output design configurations. * Sanitization: Includes visual patterns detection (AI slop detection) but does not verify the content of ingested text for malicious instructions. - [EXTERNAL_DOWNLOADS]: Supports optional extraction of design tokens from Figma's platform when a public URL is provided in the project configuration.
- [SAFE]: Accesses local project configuration files and identity documents within the
.moai/directory to extract brand specifications, which is consistent with its stated purpose.
Audit Metadata