aidesigner-frontend
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run the@aidesigner/agent-skillspackage from the public NPM registry. This is part of the standard setup and maintenance workflow for the tool. - [COMMAND_EXECUTION]: The skill provides instructions to run
npx -y @aidesigner/agent-skills initandnpx @aidesigner/agent-skills doctorto initialize the project and verify the connection. These are expected administrative tasks for this specific integration. - [DATA_EXFILTRATION]: The skill connects to a remote MCP server at
api.aidesigner.ai. It explicitly states that it reads project context (framework, tokens, components) to ensure the generated design matches the existing repository. While this involves sending project metadata externally, it is the primary stated purpose of the skill and uses standard OAuth for authentication.
Audit Metadata