product-design-image-to-code
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local utility script to automate the creation of new project directories and the deployment of template files.
- Evidence: The file
scripts/bootstrap-prototype.mjsusesnode:fsmethods such ascpSyncandmkdirSyncto scaffold the prototype project based on the--destargument provided at runtime. - [EXTERNAL_DOWNLOADS]: The workflow involves fetching standard web development dependencies from the official npm registry.
- Evidence: The
references/local-prototype-preflight.mdfile instructs the agent to runnpm installwithin the generated project root to install the dependencies defined in the boilerplatepackage.json. - [SAFE]: The skill follows secure development practices by isolating the prototype environment and providing clear verification steps.
- Evidence: The boilerplate includes a
.npmrcfile that scopes the package cache to the local project directory. Additionally, the skill implements a structured 'Design QA' process using browser-based tools to verify the accuracy of the generated code against the source mockup.
Audit Metadata