design-tokens
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (
grep,sort,uniq) to scan the user's codebase for specific patterns related to design tokens (hex codes, CSS properties, and units). These commands are static and do not interpolate arbitrary user input into the execution string. - [SAFE]: The skill is strictly focused on its primary purpose of design system management. Analysis confirms the absence of prompt injection, obfuscation, hardcoded credentials, or network exfiltration patterns.
Audit Metadata