draft-wireframe
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a UX design assistant, producing wireframes in either ASCII or HTML format. The instructions focus on layout logic, visual styling, and content hierarchy without involving dangerous operations. No malicious patterns such as prompt injection, persistence mechanisms, or credential harvesting were detected.
- [EXTERNAL_DOWNLOADS]: In the HTML hand-drawn mode, the skill is instructed to use Google Fonts (such as Caveat or Patrick Hand) via standard web references. These are well-known and trusted services for web typography assets and do not involve executable code.
- [COMMAND_EXECUTION]: While the skill's metadata lists the 'Bash' tool as allowed, the instructions do not specify any shell commands for execution beyond typical project artifact management. There are no signs of privilege escalation or arbitrary code execution.
- [SAFE]: The identified vendor resources, including the domain 'tonone.ai' and the GitHub repository 'github.com/tonone-ai/tonone', are consistent with the stated author and represent legitimate infrastructure for the skill's functionality.
Audit Metadata