baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local image processing utilities including sips, cwebp, and ImageMagick's convert using child_process.spawn. These operations are performed without a shell environment (shell: false), which is a security best practice to prevent shell injection attacks.
  • [EXTERNAL_DOWNLOADS]: The script uses the sharp library for image processing when other system tools are unavailable. sharp is a widely-used and reputable open-source package for high-performance image processing.
  • [DATA_ACCESS]: The skill performs filesystem operations such as reading image metadata, renaming files, and writing compressed output. These actions are transparently described in the skill's documentation and are necessary for its stated purpose of image optimization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 03:59 PM
Security Audit — agent-trust-hub — baoyu-compress-image