design-systems

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a Python script, scripts/audit_design_tokens.py, which performs a static analysis of CSS and TypeScript files to detect hardcoded color and pixel values. The script uses standard regex matching and file-system traversal. Additionally, a bash hook, hooks/pre-tool.sh, uses the find utility to check for the presence of design-related configuration files.
  • [EXTERNAL_DOWNLOADS]: The instructions in SKILL.md and the references describe workflows for installing external plugins and UI components. These operations utilize well-known developer utilities like npx shadcn and a local installation script intended for the vendor's ecosystem. Documentation also includes examples of fetching component registries from external JSON services.
  • [SAFE]: The skill demonstrates secure development practices, such as recommending the use of environment variables for private registry authentication and providing comprehensive accessibility guidelines for UI component development.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 04:25 PM
Security Audit — agent-trust-hub — design-systems