budge
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the injection of a remote JavaScript IIFE from
https://www.budge.design/budge.iife.jsorhttps://skills-pearl.vercel.app/budge.iife.jsinto the project's layout. This script provides the core functionality for the floating style widget. - [COMMAND_EXECUTION]: Installation instructions provided in the skill include the use of
npxto add the skill to a project, which is standard behavior for Node.js-based developer tools. - [SAFE]: The runtime utility uses the
react-grablibrary to identify source code locations (file paths and line numbers) for elements being edited. This metadata is used to generate specific edit prompts for the user to manually copy and paste, and it remains within the local development context.
Audit Metadata