design-systems-slds-apply

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs agents to run the official Salesforce linter using the command npx @salesforce-ux/slds-linter@latest. This targets a verified package under the @salesforce-ux scope on the npm registry, which is the official channel for SLDS tooling.
  • [COMMAND_EXECUTION]: The skill includes Node.js utility scripts in the scripts/ directory (search-blueprints.cjs, search-hooks.cjs, search-icons.cjs, and search-utilities.cjs) used to search local design system metadata. These scripts use the Node.js fs module to read local YAML and JSON files and do not execute external code or arbitrary system commands.
  • [EXTERNAL_DOWNLOADS]: All external documentation links point to official Salesforce developer domains, specifically developer.salesforce.com and lightningdesignsystem.com. These are trusted sources directly related to the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 07:44 PM
Security Audit — agent-trust-hub — design-systems-slds-apply