ucoz-popup-design-skill
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely through official uCoz MCP tools for template and file management, ensuring all actions are within authorized site boundaries.
- [SAFE]: The python theme builder (
scripts/build_theme.py) performs local contrast audits (4.5:1 ratio) and theme generation without any network calls or external data dependencies. - [SAFE]: The audit script (
scripts/inspect-windows.js) is designed for read-only DOM inspection. It explicitly excludes sensitive data such as form values, cookies, and tokens from its analysis. - [SAFE]: The skill implements strong safety practices, including mandatory template backups, scoped CSS selectors to prevent global style leakage, and byte-exact patching to avoid breaking site functionality.
Audit Metadata