design-system

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill's primary function is to manage design tokens and generate brand-compliant assets, which it performs using local scripts and standard project data.
  • [EXTERNAL_DOWNLOADS]: The skill references assets from well-known and trusted technology services, which is standard practice for web-based design tools.
  • Loads the Chart.js library for data visualizations from the JSDelivr CDN.
  • Fetches typography styles from Google Fonts.
  • Links to background images from Pexels, a reputable stock photography provider.
  • [COMMAND_EXECUTION]: The skill utilizes bundled scripts to automate the design workflow.
  • Executes Node.js scripts to transform JSON design tokens into CSS variables and validate token usage in the codebase.
  • Runs Python scripts to generate HTML slides based on curated design strategies and search local design databases using the BM25 algorithm.
  • These operations are limited to the skill's own environment and standard project directories.
  • [DATA_EXPOSURE]: The skill reads from a local BRIEF.md file to extract project context for its search engine. This is an intended functional requirement to ensure generated designs align with the user's specific project goals.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 08:41 AM
Security Audit — agent-trust-hub — design-system