token-lint
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a Node.js script to perform static analysis on source code files. It scans for a specific regex pattern
var(--vapor-...)to identify design tokens. - [SAFE]: File access is restricted to the path provided by the user and the skill's own assets directory. It explicitly skips sensitive directories like
.git,node_modules, and.venv. - [SAFE]: No network activity, dynamic code execution (eval/exec), or privilege escalation attempts were found.
- [SAFE]: The skill includes comprehensive documentation of its limitations, advising users on how to interpret results and handle edge cases where the regex-based scanning might be insufficient.
Audit Metadata