hig-doctor-audit

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the npx utility to download and execute the hig-doctor package from the NPM registry. This package is the core tool for the skill's auditing functionality and is associated with the vendor's documentation site at apple.raintree.technology.
  • [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands, including npx hig-doctor and bun run audit, to perform code scans on user-specified project paths. These commands are used to identify design and accessibility issues as part of the primary workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 06:09 PM
Security Audit — agent-trust-hub — hig-doctor-audit