design-to-production

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses several local shell scripts to facilitate its workflow:
  • scripts/extract-structure.sh: Reads local HTML files and parses them using standard Unix tools like grep, sed, and awk to extract CSS classes and element counts. It outputs results to a local JSON file.
  • scripts/scaffold-component.sh: Creates new React component files by populating templates with user-provided names and module paths. It includes basic protection against accidental file overwrites.
  • scripts/validate.sh: Performs static analysis on generated code to ensure it meets quality standards, such as file length limits and naming conventions.
  • [SAFE]: All operations are restricted to the local filesystem and target the user's project directory. There are no external network requests, remote script downloads, or credential-handling operations. The templates and reference documents provide helpful guidance for standard React development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 11:16 PM