Skills
skills/aradotso/design-skills/aipixelperfect-design-generator/Gen Agent Trust Hub

aipixelperfect-design-generator

Warn

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to clone a repository from an external source: https://github.com/abnormal-codex/Ai-Pixel-Design-Archive.git. The GitHub account 'abnormal-codex' is not clearly associated with the skill author 'Aradotso' or the domain 'ara.so'.
  • [COMMAND_EXECUTION]: The installation process requires running npm install inside the cloned repository, which executes third-party scripts and installs potentially untrusted dependencies on the local system.
  • [CREDENTIALS_UNSAFE]: The skill's logic involves handling and transmitting sensitive authentication tokens, specifically FIGMA_ACCESS_TOKEN and ADOBE_ACCESS_TOKEN, to facilitate exports to external design platforms.
  • [DATA_EXFILTRATION]: The skill transmits user-provided prompts and design data to external endpoints, including api.aipixelperfect.com, synthesis.aipixelperfect.com, and collab.aipixelperfect.com.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 2, 2026, 12:54 AM
Security Audit — agent-trust-hub — aipixelperfect-design-generator