svg-brand-tint-ops
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a local toolset for SVG manipulation and image tracing without any detected malicious patterns or unauthorized data access.
- [EXTERNAL_DOWNLOADS]: The studio interface fetches typography resources from Google Fonts (fonts.googleapis.com), which is a well-known and trusted service.
- [COMMAND_EXECUTION]: The Node.js server implementation includes a path-traversal guard to ensure it only serves static assets from the intended directory, preventing unauthorized file access.
- [DATA_EXFILTRATION]: All image and SVG processing occurs locally within the user's browser canvas or local command-line environment, with no network requests identified that could exfiltrate data.
Audit Metadata