The Agent Skills Directory

[SAFE]: No security issues were detected. The skill focuses on providing best practices for UI iconography and brand asset management, following standard industry guidelines.
[SAFE]: The included normalization script (scripts/normalize-icon.py) functions as a security tool by sanitizing third-party SVG files. It explicitly removes elements and attributes associated with active content, such as <script>, <foreignObject>, and on* event handlers, effectively mitigating the risk of cross-site scripting (XSS) when inlining assets into a web document.
[SAFE]: The self-test suite (tests/run.sh) verifies the functionality of the normalization script against local fixtures without performing any network operations. It operates within a controlled temporary directory and cleans up its environment upon completion.
[SAFE]: References to external icon sources and services (such as Brandfetch and theSVG) are documented for informational purposes. The skill includes security advice for handling these resources, such as not committing API keys to version control and following trademark usage guidelines.

icon-ops