gravit-designer-security-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a security educational resource, providing guidance on identifying suspicious software and promoting ethical software use.
- [COMMAND_EXECUTION]: Provides standard, well-documented commands for Linux package managers (apt, dnf, pacman), macOS (brew), and network diagnostics (tcpdump). These are used appropriately within the context of software installation and security analysis.
- [EXTERNAL_DOWNLOADS]: References official and well-known domains for software downloads, such as designer.io and inkscape.org. These references are neutral and consistent with the skill's purpose.
- [CREDENTIALS_UNSAFE]: Uses environment variable placeholders (e.g., ${VIRUSTOTAL_API_KEY}, ${OPENAI_API_KEY}) for API integrations, which is a standard security best practice for managing secrets. No hardcoded credentials or sensitive data exposure were found.
Audit Metadata