ui-to-vue
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
npxcommand to download and run theui-to-vue-converterpackage from the public npm registry. The instructions specifically recommend using a pinned version (1.0.2), which helps prevent the execution of unexpected updates from the remote repository. - [COMMAND_EXECUTION]: The skill provides shell commands to execute the converter tool. These commands involve standard file system operations, such as reading from a screenshots directory and writing generated code to a source directory.
- [CREDENTIALS_UNSAFE]: The skill mentions the need for a
DASHSCOPE_API_KEY. It identifies this as a potential security risk and explicitly instructs users to manage the key through environment variables or local configuration files that are excluded from version control using.gitignore.
Audit Metadata