color-palette-generator
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows its documented purpose of generating color palettes and formatting them into a local HTML file. No malicious intent or suspicious patterns were identified in the instructions or example output.
- [DATA_EXPOSURE_EXFILTRATION]: The skill's ability to read image files from the local system (e.g.,
~/Documents/Screenshots/inspiration.png) is directly tied to its core functionality of color extraction. No network capabilities or sensitive file access patterns (like SSH keys or environment variables) are present. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external image files. However, the potential impact is low because the agent's actions are restricted to color analysis and static file generation, with no execution of subprocesses or network requests.
- [COMMAND_EXECUTION]: The skill does not instruct the agent to execute any shell commands or scripts. It focuses entirely on text generation and local file writing.
Audit Metadata