Skills
skills/redongreen/uspec/firstrun/Gen Agent Trust Hub

firstrun

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script (./utils/sync-skills.sh) to synchronize skill files for specific development environments like Claude Code and Codex.\n- [COMMAND_EXECUTION]: The skill writes configuration data, including component keys and environment settings, to a local file named uspecs.config.json at the project root.\n- [COMMAND_EXECUTION]: The skill utilizes Figma MCP tools (use_figma, figma_execute) to run JavaScript snippets within the Figma environment for metadata extraction, such as detecting font families and retrieving component IDs.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 10:10 PM
Security Audit — agent-trust-hub — firstrun