design-systems-slds-validate
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill invokes
npxto download and run the official Salesforce SLDS linter (@salesforce-ux/slds-linter), which is a trusted package from a recognized vendor. - [COMMAND_EXECUTION]: The skill executes a bundled Node.js script (
scripts/analyze-quality.cjs) and the SLDS linter command to perform static analysis on Lightning Web Components. - [SAFE]: No malicious patterns such as exfiltration, persistence, or obfuscation were detected. The skill implements legitimate auditing functionality consistent with its stated purpose. Mandatory Evidence Chain for Indirect Injection Surface: 1. Ingestion points: .css, .html, and .js files in the user-specified component directory. 2. Boundary markers: Absent. 3. Capability inventory: Execution of local scripts and shell-based linting tools. 4. Sanitization: Absent.
Audit Metadata