favicon-gen
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a set of documentation and templates for generating web assets like favicons and manifests. It does not contain any executable code that could perform unauthorized actions.
- [SAFE]: All external links point to reputable sources including MDN, Apple Developer documentation, and well-known web utilities like RealFaviconGenerator. No suspicious or untrusted domains are referenced.
- [SAFE]: The skill uses the platform's native file writing tools for asset creation and provides standard shell commands for image processing using the industry-standard ImageMagick utility.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via user-provided text and SVG content. 1. Ingestion points: monogram text, hex colors, and logo SVG paths provided by the user to the favicon-crafter agent. 2. Boundary markers: The skill relies on standard XML and JSON templates without specialized delimiters to isolate user input. 3. Capability inventory: The agent utilizes Read, Write, Glob, and Grep tools. 4. Sanitization: The instructions do not specify sanitization or escaping protocols for user-supplied content before file generation. This is considered safe as the ingestion is the primary purpose of the skill.
Audit Metadata