takumi
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and integration guide for the Takumi image rendering library. It provides instructions on how to render JSX, HTML, and node trees to various image formats (PNG, JPEG, WebP, SVG, and animations).
- [SAFE]: The documentation explicitly addresses security considerations such as Server-Side Request Forgery (SSRF) when fetching remote assets (images/fonts) via user-influenced markup. It correctly recommends using the
images.allowUrloption to whitelist domains, which is a recognized security best practice. - [SAFE]: All identified Node.js packages and external repository references are standard components of the Takumi ecosystem and its official documentation. No suspicious downloads or remote code execution patterns were detected.
Audit Metadata