wix-design-system

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes a bundled Node.js script (wds.cjs) to facilitate searching and reading documentation. The agent is instructed to run this script locally using the node command to retrieve design system details.
  • Input Sanitization: The helper script implements validation using regular expressions (e.g., /^[A-Za-z0-9]+$/) for component names. This practice is a security best practice that helps prevent potential directory traversal considerations when the script accesses documentation files on the filesystem.
  • Documentation Processing: The skill is designed to ingest and process documentation files from the @wix/design-system package located in node_modules. While reading external data is a standard surface for indirect instructions, the skill focuses on a specific, well-known design system for its intended functionality.
  • Environment Integration: The script includes logic to support Yarn Plug'n'Play (PnP) by attempting to load a project's .pnp.cjs file. This is a routine integration pattern for ensuring compatibility across different JavaScript package management environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 06:25 AM
Security Audit — agent-trust-hub — wix-design-system