aidesigner-frontend

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the @aidesigner/agent-skills package from the public NPM registry. This is part of the standard setup and maintenance workflow for the tool.
  • [COMMAND_EXECUTION]: The skill provides instructions to run npx -y @aidesigner/agent-skills init and npx @aidesigner/agent-skills doctor to initialize the project and verify the connection. These are expected administrative tasks for this specific integration.
  • [DATA_EXFILTRATION]: The skill connects to a remote MCP server at api.aidesigner.ai. It explicitly states that it reads project context (framework, tokens, components) to ensure the generated design matches the existing repository. While this involves sending project metadata externally, it is the primary stated purpose of the skill and uses standard OAuth for authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 05:04 PM