A design file becomes executable when an agent can read its layers and run npm. Hidden instructions can cross from file to shell. Prompt filtering cannot enforce that boundary. Gate child-process creation instead. We verified five file-to-shell paths.
このプロンプトは参照画像を使用します。画像を追加すると効果的です（任意・なしでも生成可能）。 