ui-convert-token-miner
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows a deterministic extraction process for design tokens. Evidence includes the use of regex and XML parsing in scripts like css-extractor.ts and xaml-extractor.py to process local project files without external dependencies.
- [COMMAND_EXECUTION]: The main script manages subprocesses for multi-language support. Evidence includes mine.ts using execFile to run python3 with specific, internally-defined script paths for XAML and Dart parsing.
- [EXTERNAL_DOWNLOADS]: All dependencies are standard packages from the official NPM registry. Evidence includes package.json listing standard development tools such as postcss and fast-glob.
Audit Metadata