ui-designer
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local script
scripts/apply_ui_rules.pywhich is used to generate design system rules and Tailwind configuration files. The script is written using only Python standard libraries and performs simple file-writing operations to create project-specific guidelines such as.cursorrules. - [EXTERNAL_DOWNLOADS]: The skill features tools to fetch design specifications and color palettes from established industry resources. It utilizes the
brand_fetch_design_mdtool to downloadDESIGN.mdfiles fromgetdesign.mdand fetches live palettes fromColor Hunt. These are legitimate external dependencies used for their intended functional purposes. - [SAFE]: The skill provides integration snippets for standard frontend assets, including icon and motion libraries. These snippets correctly point to official and reputable CDN providers such as
jsDelivr,cdnjs, andunpkg, which is standard practice for modern web development. - [PROMPT_INJECTION]: The skill ingests data from local project scans and external design references to perform its primary function of design matching and rule generation. While this introduces an indirect prompt injection surface typical of agentic tools, the skill focuses on structured data processing and quality verification to ensure design consistency.
Audit Metadata