skills/xiaomi/hiui/hiui-page-workflow/Gen Agent Trust Hub

hiui-page-workflow

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs and updates its coordinated components (refine-product-requirements, hiui-design, and ux-walkthrough) by fetching source code from the official vendor repository at https://github.com/XiaoMi/hiui.git.
  • [COMMAND_EXECUTION]: The package contains several Node.js scripts (e.g., install-workflow-bundle.mjs, verify-workflow-bundle.mjs) and shell scripts (e.g., install-workflow.sh) that use spawnSync to execute system commands like git, node, and python3 for environment setup and bundle management.
  • [COMMAND_EXECUTION]: The workflow instructions in SKILL.md direct the agent to execute project-specific commands such as npm run typical-page:plan-page-task to perform page planning and generation within the developer's local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 05:43 AM
Security Audit — agent-trust-hub — hiui-page-workflow