validating-design-tokens
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill uses shell commands like
lsandgrepto scan the local project files. These commands are strictly scoped to finding design tokens and code violations in directories likesrc/andstyles/and do not exhibit signs of arbitrary command injection. - [EXTERNAL_DOWNLOADS] (LOW): The instructions suggest installing
stylelintandstylelint-declaration-strict-valuevia npm. While these are external dependencies, they are standard, widely-used linting tools in the web development ecosystem.
Audit Metadata