validate-tokens
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for read-only auditing of local project files. Its primary function is to generate a report based on specific pattern matching rules for CSS/SCSS design tokens.
- [SAFE]: No network operations, external downloads, or remote code execution patterns were detected. The skill operates entirely within the local file system using static analysis techniques.
- [SAFE]: The instructions do not contain prompt injection attempts, obfuscation, or persistence mechanisms. The capabilities are limited to reading files and outputting text summaries, which represents a low-risk profile.
- [SAFE]: File paths and token naming conventions ($ouds-, $core-) are consistent with the identified author's (orange-opensource) infrastructure and the stated purpose of the skill.
Audit Metadata