lucide-icons
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads icon metadata and SVG files from the official Lucide Icons GitHub repository (
raw.githubusercontent.com/lucide-icons/lucide). These references target a well-known and trusted service. - [SAFE]: The core logic in
scripts/lucide.jsperforms file writing operations to save icons and React components. It uses path resolution and sanitizes icon names to prevent directory traversal issues. - [SAFE]: The installation script (
install.sh) manages the setup process by creating local directories and installing dependencies via npm. It does not perform any unauthorized system modifications or persistence actions. - [SAFE]: The React component generation in
scripts/templates/react.template.jsuses string manipulation and static templates to create boilerplate code. It does not involve dynamic execution of untrusted input. - [SAFE]: All Node.js dependencies identified in
package.json(axios, chalk, commander, ora) are standard, reputable packages used for CLI and network functionality.
Audit Metadata