ui-convert-scanner

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a local project scanning workflow. It reads configuration from a local file and uses the fast-glob library to list files, which is standard behavior for development-oriented agent skills.\n- [SAFE]: Artifact classification in scripts/classify.ts uses static rules based on file paths and extensions (e.g., identifying CSS files as 'style' and React files as 'component'). It does not execute or evaluate the content of the files it classifies.\n- [SAFE]: The dependency detection logic in scripts/deps.ts utilizes regular expressions to find static import and require statements. It does not perform dynamic loading or code injection.\n- [SAFE]: File hashing is performed using the built-in Node.js crypto module to generate SHA-256 digests for change detection. This is a secure and standard practice for ensuring file integrity and idempotency.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 08:01 PM