taste
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill automates design analysis by using Playwright to extract visual styles from user-provided URLs. This process is transparent and focused on design tokens.
- [SAFE]: The workflow utilizes the
--isolatedflag for browser sessions, ensuring that no sensitive user data (like cookies or login sessions) is accessed or leaked during the analysis. - [SAFE]: Installation instructions use standard platform commands to add the Playwright MCP server, a well-known tool for browser automation.
- [COMMAND_EXECUTION]: Local shell execution (
bash) is used to rungrepfor a self-audit pass (filtering out generic AI phrases) andpython3is used for JSON validation. These are benign operations intended to ensure output quality. - [SAFE]: The skill writes design maps and tool-specific rules to the local filesystem as intended by its core functionality. These exports are directed to standard configuration paths for tools like Cursor, Windsurf, and Claude Code.
- [SAFE]: The multi-step analysis pipeline includes a dedicated 'Observer' agent that serves as a quality gate, ensuring the final output is evidence-based and free of generic descriptions.
Audit Metadata