vendure-tokens
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are focused on design token application and styling audits. No malicious patterns, obfuscation, or safety bypass attempts were found.
- [COMMAND_EXECUTION]: The skill instructs the agent to inspect git remotes and project code to classify repository ownership. This is a standard, read-only operation for development tasks and does not involve executing unauthorized or harmful commands.
- [REMOTE_CODE_EXECUTION]: The skill references official vendor packages (@vendure-io/design-tokens, @vendure-io/design-lint) and standard project maintenance commands (lint, test). It does not initiate unauthorized downloads or execute scripts from untrusted remote sources.
- [DATA_EXFILTRATION]: No patterns of credential harvesting or sensitive data transmission were detected. Git metadata is used locally solely for environment classification logic.
Audit Metadata