light-frontend-design
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of UI components and design systems from reputable organizations, including Microsoft (Fluent UI), IBM (Carbon), Shopify (Polaris), and GitHub (Primer). All package installations target official registries and use verified version numbers.- [COMMAND_EXECUTION]: Provides localized Python scripts (
audit_checklist.py,ai_tell_lint.py) for mechanical validation of frontend layouts. These scripts utilize standard libraries for pattern matching and HTML parsing to ensure adherence to quality standards and accessibility guidelines.- [REMOTE_CODE_EXECUTION]: Uses standard developer toolchains such asnpx shadcn@latest initfor scaffolding components. This behavior is confined to initialization workflows and relies on the official, trusted shadcn registry.- [SAFE]: No evidence of credential exposure, data exfiltration, or prompt injection was detected. The skill uses local design token databases and encourages standard environment variable management for project-specific secrets.
Audit Metadata