ui-mockup-visualizer
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses local Python scripts to initialize workspaces, manage a local HTTP server, and capture screenshots via a headless browser. These scripts operate within the local environment and bind services to 127.0.0.1.
- [SAFE]: UI rendering is performed using Svelte and TailwindCSS loaded from well-known CDNs (esm.sh, tailwindcss.com).
- [SAFE]: The skill implements dynamic compilation of a Svelte component at runtime within the browser environment. The source code for the component is defined statically within the skill assets.
- [SAFE]: Screenshot capture is performed using subprocess to launch a local browser instance (Chrome/Chromium) with headless flags. Command construction uses list-based arguments, preventing shell injection.
Audit Metadata