ux-review
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bashto execute a local script*/.claude/skills/ux-review/../../hooks/yaml-helper.sh. This is a internal utility for configuration resolution and resides within the skill's own directory structure. - [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!bashsyntax inSKILL.mdto dynamically resolve workflow configuration at load time. The command targets a local project scriptyaml-helper.shto fetch configuration keys. This is used for environment setup and does not involve external network calls or sensitive data exfiltration. - [SAFE]: The skill is explicitly defined as read-only and does not perform file writes, network operations to untrusted domains, or credential access. All analysis is performed on local markdown files within the project's design directory.
Audit Metadata