Passed all audits
Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.
Gen Agent Trust Hub
passThe brand skill is safe for use and provides a robust framework for managing brand identity, voice, and design tokens. It primarily processes local markdown documentation and assets. While it features an architectural surface for indirect prompt injection and invokes internal dependency scripts via the command line, these behaviors are constrained to local files and align with the skill's intended administrative purpose. References to external resources are limited to well-known, trusted services.
Socket
passNo alerts
Snyk
passRisk: LOW · No issues