open-design-game-ui-concept
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard system utilities including
zip,unzip,cwebp, andpsto manage game assets, generate images, and monitor local design processes. These operations are scoped to the project directories. - [CREDENTIALS_UNSAFE]: The packaging script (
package_open_design_handoff.mjs) implements a security blocklist (FORBIDDEN_NAMES) that prevents the accidental inclusion of sensitive files such as.env,private_key,api_token,credentials, andkubeconfigin design handoffs. - [EXTERNAL_DOWNLOADS]: The skill interacts with a local development server and an Open Design daemon located at
127.0.0.1. These communications are restricted to the local machine environment. - [DATA_EXFILTRATION]: The scripts implement strict path validation (
resolveInside) to prevent directory traversal and ensure that only files within the designated handoff folder are processed.
Audit Metadata