design-notebook
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execSyncwithintemplate/build-artifact.jsto find and run theesbuildbundler during the artifact generation process. This is a legitimate use of shell commands to manage the build pipeline. - [EXTERNAL_DOWNLOADS]: Dependencies are managed through standard package managers (
npm install). The skill also references well-known external services, such as Google Fonts for typography and Google Forms for user feedback, which are handled as trusted sources. - [SAFE]: The skill's behavior aligns with its stated purpose of UI prototyping. It uses standard React hooks, Vite configurations, and clear instructions for the AI agent to manage design iterations safely within the user's project environment.
Audit Metadata