baoyu-compress-image
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local image processing utilities including
sips,cwebp, and ImageMagick'sconvertusingchild_process.spawn. These operations are performed without a shell environment (shell: false), which is a security best practice to prevent shell injection attacks. - [EXTERNAL_DOWNLOADS]: The script uses the
sharplibrary for image processing when other system tools are unavailable.sharpis a widely-used and reputable open-source package for high-performance image processing. - [DATA_ACCESS]: The skill performs filesystem operations such as reading image metadata, renaming files, and writing compressed output. These actions are transparently described in the skill's documentation and are necessary for its stated purpose of image optimization.
Audit Metadata