dark-mode
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs automated refactoring of project source code to implement dark mode. It reads project configuration files (such as
package.json,pubspec.yaml, andtailwind.config.js) to identify the environment and color usage. - [COMMAND_EXECUTION]: The skill invokes standard development tools (e.g.,
tsc,eslint,flutter analyze) for code verification. These actions are aligned with the skill's stated purpose of implementing and verifying theme changes. - [DATA_EXPOSURE]: The skill records execution telemetry to a local file (
skill-telemetry.md) within the~/.claude/projects/directory. This is used for internal tracking of the skill's performance and does not involve external data exfiltration. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it processes untrusted data from project source files to identify hardcoded colors. While it lacks explicit boundary markers or sanitization for this content, its capabilities are limited to theme refactoring and standard linting, presenting a low risk for exploitation.
Audit Metadata