seed-token-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of utility scripts designed for local repository analysis. It does not contain any malicious patterns such as remote code execution, persistence mechanisms, or unauthorized data access.
- [SAFE]: File system interactions are restricted to the local workspace. The scripts implement security best practices by using
realpathand path validation logic (isPathInside) to prevent path traversal and ensure that file access remains within the boundaries of the design system repository. - [SAFE]: The tool operates entirely locally without any network connectivity. All analysis is performed on existing project files, and no external data is downloaded or exfiltrated.
- [SAFE]: The execution logic is strictly read-only. The scripts parse configuration data and output information in a structured format for the agent to process, without modifying the repository's state or environment.
Audit Metadata