uiux-react-jsx-packager
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is designed for the legitimate task of bundling React projects into a single file for easy portability. No malicious patterns were identified during the audit.\n- [COMMAND_EXECUTION]: The
scripts/preview_single_jsx_vite.shscript executes shell commands to set up a temporary environment, write project files, and launch a local development server usingnpm. These actions are confined to the local environment and standard temporary directories.\n- [EXTERNAL_DOWNLOADS]: The preview script fetches standard development dependencies (react,vite, etc.) from the official NPM registry. These are well-known resources and do not pose a security risk in this context.\n- [EXTERNAL_DOWNLOADS]: The documentation references the author's own GitHub repository for skill installation via theopenskillsutility.
Audit Metadata