cc-design-html-prototyping

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads dependencies from official and well-known registries during installation, including Node.js packages via npm and Playwright browser binaries. These are standard operations for a design development environment.
  • [EXTERNAL_DOWNLOADS]: Prototype templates fetch React, Babel, and Tailwind CSS from unpkg.com and cdn.tailwindcss.com. These are pinned to specific versions (e.g., React 18.2.0, Babel 7.23.5) and are standard for browser-based JSX prototyping.
  • [COMMAND_EXECUTION]: The installation and usage instructions involve shell commands (git clone, npm install, npx playwright install, and node execution for export scripts). These are expected for a developer-oriented tool managed via CLI.
  • [DYNAMIC_EXECUTION]: The skill utilizes @babel/standalone to transpile React JSX in the browser at runtime. This is the documented and standard method for the skill's interactive 'Design Workflow' and is confined to the generated HTML artifacts.
  • [COMMAND_EXECUTION]: Automated design verification uses Playwright to launch a Chromium instance, navigate to local files, and take screenshots. This process includes error checking via the browser console to ensure design quality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 11:44 PM
Security Audit — agent-trust-hub — cc-design-html-prototyping