app-icon
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from
docs/BRIEF.mdto determine icon concepts. This is a potential ingestion point for untrusted data. * Ingestion point:docs/BRIEF.md(read in Step 1). * Boundary markers: Absent. * Capability inventory: File system write access, execution of PowerShell scripts (make-icon.ps1,build.ps1), and execution of theIconToolC# project. * Sanitization: Absent. - [DYNAMIC_EXECUTION]: The skill involves running a local C# project (
tools/IconTool) viadotnet runto render icons. This is a standard and intended part of the icon production workflow. - [COMMAND_EXECUTION]: The skill uses
ie4uinit.exe -showto refresh the Windows icon cache and usesGet-ChildItemto read the user's pinned taskbar items. These commands are transparently documented for their functional role in icon design and deployment.
Audit Metadata