design-visual-parity
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified during the analysis of this skill's instructions and scripts.
- [OBFUSCATION]: Static detectors flagged Unicode bidirectional (Bidi) control characters in
scripts/lib/hierarchy.mjs. Analysis confirms these characters (U+200E, U+200F, etc.) are used legitimately in a regex to sanitize text strings and remove bidi markers from accessibility labels before comparison. - [DYNAMIC_EXECUTION]: The skill uses
module.registerHooksinscripts/lib/app-modules.mjsto enable direct importing of TypeScript files from the host repository. This is a legitimate implementation detail designed to allow the parity checks to execute app-side logic (reducers, formatters) during the auditing process. - [COMMAND_EXECUTION]: The skill executes standard mobile development CLI tools (
xcrun simctl,adb,maestro) to control devices and capture data. These operations are restricted to the local environment and are necessary for the skill's primary function of visual regression testing.
Audit Metadata