design-system
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill's primary function is to manage design tokens and generate brand-compliant assets, which it performs using local scripts and standard project data.
- [EXTERNAL_DOWNLOADS]: The skill references assets from well-known and trusted technology services, which is standard practice for web-based design tools.
- Loads the Chart.js library for data visualizations from the JSDelivr CDN.
- Fetches typography styles from Google Fonts.
- Links to background images from Pexels, a reputable stock photography provider.
- [COMMAND_EXECUTION]: The skill utilizes bundled scripts to automate the design workflow.
- Executes Node.js scripts to transform JSON design tokens into CSS variables and validate token usage in the codebase.
- Runs Python scripts to generate HTML slides based on curated design strategies and search local design databases using the BM25 algorithm.
- These operations are limited to the skill's own environment and standard project directories.
- [DATA_EXPOSURE]: The skill reads from a local
BRIEF.mdfile to extract project context for its search engine. This is an intended functional requirement to ensure generated designs align with the user's specific project goals.
Audit Metadata