image-maker
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [SAFE]: The skill incorporates extensive security measures, including a validation script that prevents directory traversal and symlink attacks.
- [COMMAND_EXECUTION]: Includes a self-contained validation script (validate-image-maker.mjs) that uses only standard Node.js built-in modules to verify internal logic and input safety.
- [PERSISTENCE]: Restricts file writing to a specific sandboxed subdirectory (.hyper/image-maker/) and performs magic byte validation on all generated artifacts.
Audit Metadata