appicons
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches image assets from user-provided URLs or the official Iconify API (
api.iconify.design). These are processed to create icon sets. - [EXTERNAL_DOWNLOADS]: The shell script sends image data to
favicontools.com(a documented external service for this skill) to generate the icon bundle and downloads the resulting ZIP archive. - [COMMAND_EXECUTION]: The script uses standard system utilities such as
curlfor network requests,unzipto extract the generated icons, and eitherpython3orjqfor parsing the API's JSON response. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to modify project files (like
index.htmlorlayout.tsx) to integrate the generated icon tags, which is the primary purpose of the skill.
Audit Metadata