sprite-atlas-builder

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a TypeScript script (scripts/pack.ts) designed to be run locally by the user. It performs file system operations such as reading directory contents, reading/writing PNG files, and writing JSON manifests using standard Node.js APIs (fs/promises). The execution is transparent and utility-focused.
  • [EXTERNAL_DOWNLOADS]: The documentation mentions installing the pngjs package from NPM, which is a well-known, standard library for processing PNG images in Node.js environments. This is a common and safe dependency for the stated functionality.
  • [NO_CODE]: The core logic of the skill provided in SKILL.md consists of natural language instructions and templates for generating HTML/Canvas-based placeholder art, which runs safely within the user's browser context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 04:19 PM