psd-to-preview
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requests the installation of the
psd-toolsandscikit-imagelibraries from the Python Package Index (PyPI). The instructions include a human-in-the-loop step by requiring the AI to ask for user confirmation before proceeding with the installation. - [COMMAND_EXECUTION]: The skill automates the conversion process by executing specific Python scripts located in the
.claude/skills/directory. These scripts are used for parsing layer data and generating component code. - [PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection by using layer names from design files to influence layout logic.
- Ingestion points: PSD layer names and metadata.
- Boundary markers: None identified.
- Capability inventory: Local execution of processing scripts.
- Sanitization: Not documented in the provided instructions.
Audit Metadata