psd-json-preview
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local file transformations from PSD-exported JSON and images into static code (HTML, CSS, React, Vue). All file operations (reading JSON and copying images) are performed on user-specified paths using Python's standard
pathlibandshutillibraries. - [SAFE]: The skill implements proper output sanitization. In
scripts/generators/html_generator.pyandscripts/generators/vue_generator.py, user-provided text content from the JSON input is escaped usinghtml.escape(). Inscripts/generators/react_generator.pyandscripts/generators/text_processor.py, React JSX text is handled usingjson.dumps()to ensure safe interpolation. - [SAFE]: CSS class names and component identifiers derived from the input data are sanitized via
sanitize_class_nameandnormalize_nameinscripts/utils/shared_psd_utils.py, which restricts identifiers to safe alphanumeric characters and underscores. - [SAFE]: No network operations, external downloads, or third-party dependencies were detected. All logic is contained within the provided scripts.
- [SAFE]: No privilege escalation, persistence mechanisms, or obfuscated code patterns were found in the skill's instructions or implementation.
Audit Metadata