starterkit-theme
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the legitimate @devopsnext/starterkit-theme library and provides standard developer utilities for token management and migration. All analyzed components serve their stated purpose without introducing security vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The skill contains references to installing the @devopsnext/starterkit-theme package from npm and GitHub. These resources are verified vendor assets associated with the author, thinktalentservice-ai, and are used for standard dependency management.
- [DYNAMIC_EXECUTION]: The documentation includes CLI verification commands using
node -eto validate theme tokens in a project. These scripts are intended for local development auditing and do not download or execute untrusted remote code. - [INDIRECT_PROMPT_INJECTION]: The skill guides the agent in identifying legacy theme tokens within application source code to suggest replacements. This capability is limited to text analysis and suggestion, with no dangerous execution or system-writing pathways.
Audit Metadata