layout-morph
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill content is restricted to front-end development patterns using Vue 3 and Quasar. The instructions and documentation do not contain any malicious patterns or bypass attempts.
- [COMMAND_EXECUTION]: The file
scripts/_skill_cli.pycontains arun_commandfunction usingsubprocess.run. This is a routine utility for AI agent skills to interact with local development environments. The implementation uses a list for the command argument, which is a standard security practice to prevent shell injection.
Audit Metadata