wix-design-system
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill utilizes a bundled Node.js script (
wds.cjs) to facilitate searching and reading documentation. The agent is instructed to run this script locally using thenodecommand to retrieve design system details. - Input Sanitization: The helper script implements validation using regular expressions (e.g.,
/^[A-Za-z0-9]+$/) for component names. This practice is a security best practice that helps prevent potential directory traversal considerations when the script accesses documentation files on the filesystem. - Documentation Processing: The skill is designed to ingest and process documentation files from the
@wix/design-systempackage located innode_modules. While reading external data is a standard surface for indirect instructions, the skill focuses on a specific, well-known design system for its intended functionality. - Environment Integration: The script includes logic to support Yarn Plug'n'Play (PnP) by attempting to load a project's
.pnp.cjsfile. This is a routine integration pattern for ensuring compatibility across different JavaScript package management environments.
Audit Metadata