design-notebook

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses child_process.execSync within template/build-artifact.js to find and run the esbuild bundler during the artifact generation process. This is a legitimate use of shell commands to manage the build pipeline.
  • [EXTERNAL_DOWNLOADS]: Dependencies are managed through standard package managers (npm install). The skill also references well-known external services, such as Google Fonts for typography and Google Forms for user feedback, which are handled as trusted sources.
  • [SAFE]: The skill's behavior aligns with its stated purpose of UI prototyping. It uses standard React hooks, Vite configurations, and clear instructions for the AI agent to manage design iterations safely within the user's project environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 05:56 PM