ui-designer

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a local script scripts/apply_ui_rules.py which is used to generate design system rules and Tailwind configuration files. The script is written using only Python standard libraries and performs simple file-writing operations to create project-specific guidelines such as .cursorrules.
  • [EXTERNAL_DOWNLOADS]: The skill features tools to fetch design specifications and color palettes from established industry resources. It utilizes the brand_fetch_design_md tool to download DESIGN.md files from getdesign.md and fetches live palettes from Color Hunt. These are legitimate external dependencies used for their intended functional purposes.
  • [SAFE]: The skill provides integration snippets for standard frontend assets, including icon and motion libraries. These snippets correctly point to official and reputable CDN providers such as jsDelivr, cdnjs, and unpkg, which is standard practice for modern web development.
  • [PROMPT_INJECTION]: The skill ingests data from local project scans and external design references to perform its primary function of design matching and rule generation. While this introduces an indirect prompt injection surface typical of agentic tools, the skill focuses on structured data processing and quality verification to ensure design consistency.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:00 AM
Security Audit — agent-trust-hub — ui-designer