design-md

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and executes the @google/design.md utility via npx from the npm registry.
  • The package is used for linting and exporting design tokens.
  • [COMMAND_EXECUTION]: Uses npx to run specification tools for visual identity management.
  • Supported operations include linting for WCAG compliance and exporting to Tailwind or DTCG formats.
  • [SAFE]: External repository references and dependencies are official resources corresponding to the design specification described in the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:28 PM