ux-review

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash to execute a local script */.claude/skills/ux-review/../../hooks/yaml-helper.sh. This is a internal utility for configuration resolution and resides within the skill's own directory structure.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the !bash syntax in SKILL.md to dynamically resolve workflow configuration at load time. The command targets a local project script yaml-helper.sh to fetch configuration keys. This is used for environment setup and does not involve external network calls or sensitive data exfiltration.
  • [SAFE]: The skill is explicitly defined as read-only and does not perform file writes, network operations to untrusted domains, or credential access. All analysis is performed on local markdown files within the project's design directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 07:04 PM