asset-optimization
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for asset optimization. These include standard utility calls to
svgo,pngquant,oxipng,cwebp,magick, andcjpeg. It also contains a shell script (optimize-assets.sh) that usesfindandmkdirto batch process files. These commands are typical for the skill's stated purpose of image optimization. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known development tools via
npm(e.g.,svgo,svg-sprite,sharp) andbrew(e.g.,pngquant,oxipng,webp,imagemagick,mozjpeg). These are official packages from reputable package registries and are considered safe practice for setting up the required environment. - [REMOTE_CODE_EXECUTION]: The skill mentions
npx spritesmithandnpx svg2vectordrawable. Whilenpxdownloads and executes packages, these are well-known tools in the web development ecosystem used specifically for the asset optimization tasks described in the skill.
Audit Metadata