skills/idaibin/aicraft/design-ui/Gen Agent Trust Hub

design-ui

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure coding practices by using yaml.safe_load for parsing configuration files, which prevents potential YAML deserialization vulnerabilities.
  • [COMMAND_EXECUTION]: Includes a Python script scripts/validate_ui_artifacts.py used to verify the integrity and schema compliance of UI design packages. The script is restricted to local file validation and does not perform network requests or execute unsafe shell commands.
  • [EXTERNAL_DOWNLOADS]: The skill framework accounts for external UI references by requiring metadata such as 'source' and 'rights_status'. It explicitly mandates the use of 'ignore' boundaries to ensure that external content is treated only as reference material and does not compromise the security or integrity of the project.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 08:31 AM
Security Audit — agent-trust-hub — design-ui