installing-brand-design-skills
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- COMMAND_EXECUTION (LOW): The skill's primary function is to guide the user through running terminal commands like
npx design-like <brand>to generate design-specific assets. - EXTERNAL_DOWNLOADS (LOW): The use of
npxinvolves downloading and executing thedesign-likepackage from the npm registry. - SAFE (SAFE): The skill implementation in
src/utils.tsandsrc/core/file-writer.tsincludes specific security utilities (isPathSafeandsanitizePathComponent) that validate all file destination paths to prevent directory traversal attacks. This demonstrates a security-first approach to local file generation.
Audit Metadata