The Agent Skills Directory

[SAFE]: The skill is a local development utility designed to audit design system tokens. It operates entirely within the project directory and does not exhibit any malicious patterns.
[COMMAND_EXECUTION]: The skill uses local shell scripts (validate-design-system.sh) and Python scripts (check-property-tokens.py) to scan source files. These scripts use standard unix utilities like grep, find, and awk to extract CSS variables and color hex codes for reporting purposes.
[EXTERNAL_DOWNLOADS]: The skill includes an optional check that runs stylelint via npx. The implementation uses the --no flag (npx --no -- stylelint), which ensures that the tool is only executed if it is already installed locally, preventing unexpected remote downloads during the audit.
[DATA_EXPOSURE]: The validation script records the local system username using the whoami command and includes it in the generated design-system-health.json report. This is used for metadata purposes to track when and by whom the health report was generated, which is standard practice for development audit logs.

sb-health