design-qa
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of utility scripts for quality assurance. The Python scripts (
finish_lint.py,state_matrix_checker.py,rendered_audit.py) use standard libraries to process local files and provide structured feedback on UI completeness and WCAG 2.2 compliance. - [EXTERNAL_DOWNLOADS]: The skill utilizes Playwright for browser-based snapshot auditing. The instructions guide the user to install the
playwrightpackage and its dependencies locally vianpm. Playwright is a well-known, industry-standard tool for browser automation and testing. - [COMMAND_EXECUTION]: The workflow involves executing local Python and Node.js scripts to audit project files and local URLs. The operations are transparent, deterministic, and directly support the primary purpose of UI quality assurance.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data, including UI source code and rendered DOM snapshots. While this constitutes a data ingestion surface, the scripts are designed as auditors with deterministic logic and do not feed untrusted content into agent prompts in a way that would bypass safety controls or alter agent behavior.
Audit Metadata