gds-ux

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script located at _bmad/scripts/resolve_customization.py during its activation phase to handle project-specific configurations. This script is part of the vendor's own infrastructure.
  • [COMMAND_EXECUTION]: The skill employs Python commands (e.g., python3 -c "import webbrowser...") to open locally generated HTML files, such as color themes, design directions, and key-screen mocks, in the user's browser. This is a functional feature for reviewing design outputs.
  • [EXTERNAL_DOWNLOADS]: The skill references and recommends external tools and specifications from well-known services, including Google Labs (DESIGN.md spec, Google Stitch) and Excalidraw. These references are used for industry-standard compliance and collaborative design handoffs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 06:20 PM
Security Audit — agent-trust-hub — gds-ux