ui-convert-scanner
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses deterministic Node.js scripts (scan.ts, classify.ts, deps.ts, hash.ts) to process local files. All file operations (read/write) are restricted to the project directory and intended for artifact indexing.
- [SAFE]: No network operations (fetch, http, curl) or external data transfers were found in the source code. Data processing is entirely local and results in the creation of a local 'index.json' file.
- [SAFE]: Dependencies listed in package.json (fast-glob, ts-node, typescript) are well-known, standard tools in the Node.js ecosystem used for their intended purposes.
- [SAFE]: The skill implements a 'maxDepth' configuration for its directory walker and includes an explicit list of ignored paths (e.g., node_modules, .git), following best practices for local file system tools.
Audit Metadata