product-sheet-generate

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Node.js script located in a sibling directory to manage material uploads and image generation tasks. This is a legitimate use of the Bash tool for the skill's stated purpose.
  • Evidence: node ${CLAUDE_SKILL_DIR}/../renoise-gen/renoise-cli.mjs task generate ... in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to download the generated design sheet from a URL provided by the CLI tool. This is expected behavior for retrieving remote assets generated by an AI model.
  • Evidence: curl -sL "<imageUrl>" -o "<output_dir>/product_design_sheet.png" in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 06:03 AM
Security Audit — agent-trust-hub — product-sheet-generate