design-ui
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure coding practices by using
yaml.safe_loadfor parsing configuration files, which prevents potential YAML deserialization vulnerabilities. - [COMMAND_EXECUTION]: Includes a Python script
scripts/validate_ui_artifacts.pyused to verify the integrity and schema compliance of UI design packages. The script is restricted to local file validation and does not perform network requests or execute unsafe shell commands. - [EXTERNAL_DOWNLOADS]: The skill framework accounts for external UI references by requiring metadata such as 'source' and 'rights_status'. It explicitly mandates the use of 'ignore' boundaries to ensure that external content is treated only as reference material and does not compromise the security or integrity of the project.
Audit Metadata