dsh-official-plugin-artwork
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for agents to follow specific design and technical requirements for SVG assets within the DeepSeek Harness project.
- [SAFE]: It explicitly mandates security-conscious SVG export settings by prohibiting embedded scripts, event handlers, animations, and external resource references (fonts, images, styles), which mitigates common SVG-based XSS or tracking vectors.
- [SAFE]: The execution of internal project scripts (e.g.,
pnpm run verify-package-meta,pnpm run constraints) is a standard part of the development and CI/CD workflow for metadata validation and does not involve downloading or executing unverified remote code. - [SAFE]: All file references are relative to the project structure (e.g.,
../../../scripts/), indicating interactions are scoped to the local repository environment.
Audit Metadata