product-design-index

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local bootstrapping script (bootstrap-prototype.mjs) to set up prototype projects and runs npm install. These operations are performed on the local file system using vendor-provided scripts.
  • [EXTERNAL_DOWNLOADS]: The skill invokes npm install within generated project directories, which fetches dependencies from the official npm registry, a well-known service.
  • [DATA_EXFILTRATION]: The skill includes instructions for deploying prototypes to well-known services like Vercel or @Sites. This is a documented feature of the plugin for sharing work with teams.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 06:05 PM
Security Audit — agent-trust-hub — product-design-index