skills/daveebbelaar/bawa/app-icon/Gen Agent Trust Hub

app-icon

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from docs/BRIEF.md to determine icon concepts. This is a potential ingestion point for untrusted data. * Ingestion point: docs/BRIEF.md (read in Step 1). * Boundary markers: Absent. * Capability inventory: File system write access, execution of PowerShell scripts (make-icon.ps1, build.ps1), and execution of the IconTool C# project. * Sanitization: Absent.
  • [DYNAMIC_EXECUTION]: The skill involves running a local C# project (tools/IconTool) via dotnet run to render icons. This is a standard and intended part of the icon production workflow.
  • [COMMAND_EXECUTION]: The skill uses ie4uinit.exe -show to refresh the Windows icon cache and uses Get-ChildItem to read the user's pinned taskbar items. These commands are transparently documented for their functional role in icon design and deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 08:53 AM