brand-mod
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/brand-mod.pyinvokes several CLI tools includingffmpegfor GIF creation,rsvg-convertfor processing SVG logos, andagent-browserfor capturing preview images. These executions are performed using list arguments and are consistent with the skill's media generation purpose. - [INDIRECT_PROMPT_INJECTION]: The skill generates a web-based preview of the branded UI. The template for this preview (
preview.html.tmpl) includes a simulated terminal status line that displays the text "bypass permissions on". This is a static design element for the mockup and not a functional command for the AI agent. - Ingestion points: Reads brand configuration from
mod.jsonandbrand.yamlfiles. - Boundary markers: Data is interpolated into HTML templates; basic validation is performed on the
slugfield using a regular expression. - Capability inventory: Uses
subprocess.runto call external tools and performs file system writes to generate the mod directory structure. - Sanitization: Validates the
slugfield to prevent path traversal and ensures color hex codes match expected patterns. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to push generated code to a repository and install it using the standard
claudemarketplace commands, which is the expected workflow for Claude Code plugins.
Audit Metadata