ui-convert-scanner
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a local project scanning workflow. It reads configuration from a local file and uses the
fast-globlibrary to list files, which is standard behavior for development-oriented agent skills.\n- [SAFE]: Artifact classification inscripts/classify.tsuses static rules based on file paths and extensions (e.g., identifying CSS files as 'style' and React files as 'component'). It does not execute or evaluate the content of the files it classifies.\n- [SAFE]: The dependency detection logic inscripts/deps.tsutilizes regular expressions to find static import and require statements. It does not perform dynamic loading or code injection.\n- [SAFE]: File hashing is performed using the built-in Node.jscryptomodule to generate SHA-256 digests for change detection. This is a secure and standard practice for ensuring file integrity and idempotency.
Audit Metadata