psd-json-preview

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs local file transformations from PSD-exported JSON and images into static code (HTML, CSS, React, Vue). All file operations (reading JSON and copying images) are performed on user-specified paths using Python's standard pathlib and shutil libraries.
  • [SAFE]: The skill implements proper output sanitization. In scripts/generators/html_generator.py and scripts/generators/vue_generator.py, user-provided text content from the JSON input is escaped using html.escape(). In scripts/generators/react_generator.py and scripts/generators/text_processor.py, React JSX text is handled using json.dumps() to ensure safe interpolation.
  • [SAFE]: CSS class names and component identifiers derived from the input data are sanitized via sanitize_class_name and normalize_name in scripts/utils/shared_psd_utils.py, which restricts identifiers to safe alphanumeric characters and underscores.
  • [SAFE]: No network operations, external downloads, or third-party dependencies were detected. All logic is contained within the provided scripts.
  • [SAFE]: No privilege escalation, persistence mechanisms, or obfuscated code patterns were found in the skill's instructions or implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 04:03 AM