emcn-design-review Laporan audit.

Peringatan

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill defaults fix=true, which can lead an agent to modify files across a broad scope without explicit per-change confirmation. This is a safety/usability concern, especially if the user passes a wide scope like 'whole codebase'.
• The SKILL.md references `.claude/rules/emcn-components.md` for the chip footer layout but does not include that file's content or describe what to do if it is missing.
• No explicit limitation that the review is static and cannot catch runtime or visual regressions without running the app or tests.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.