light-frontend-design

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of UI components and design systems from reputable organizations, including Microsoft (Fluent UI), IBM (Carbon), Shopify (Polaris), and GitHub (Primer). All package installations target official registries and use verified version numbers.- [COMMAND_EXECUTION]: Provides localized Python scripts (audit_checklist.py, ai_tell_lint.py) for mechanical validation of frontend layouts. These scripts utilize standard libraries for pattern matching and HTML parsing to ensure adherence to quality standards and accessibility guidelines.- [REMOTE_CODE_EXECUTION]: Uses standard developer toolchains such as npx shadcn@latest init for scaffolding components. This behavior is confined to initialization workflows and relies on the official, trusted shadcn registry.- [SAFE]: No evidence of credential exposure, data exfiltration, or prompt injection was detected. The skill uses local design token databases and encourages standard environment variable management for project-specific secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 05:04 AM
Security Audit — agent-trust-hub — light-frontend-design