asset-optimization

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for asset optimization. These include standard utility calls to svgo, pngquant, oxipng, cwebp, magick, and cjpeg. It also contains a shell script (optimize-assets.sh) that uses find and mkdir to batch process files. These commands are typical for the skill's stated purpose of image optimization.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install well-known development tools via npm (e.g., svgo, svg-sprite, sharp) and brew (e.g., pngquant, oxipng, webp, imagemagick, mozjpeg). These are official packages from reputable package registries and are considered safe practice for setting up the required environment.
  • [REMOTE_CODE_EXECUTION]: The skill mentions npx spritesmith and npx svg2vectordrawable. While npx downloads and executes packages, these are well-known tools in the web development ecosystem used specifically for the asset optimization tasks described in the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 07:17 AM
Security Audit — agent-trust-hub — asset-optimization