ui4-review
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the command
git status --porcelain | grep '\.css$'to identify modified CSS files. This is a legitimate and safe use of command execution for a repository-based linter. - [SAFE]: The skill's logic is entirely focused on CSS token replacements using standard file modification tools (
replace_string_in_file). No patterns related to credential theft, network exfiltration, remote code execution, or obfuscation were found. The skill operates within the expected scope of a design-system linting tool.
Audit Metadata