image-optimization

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill and its included scripts (scan-images.py, generate-sharp-plan.py) follow security best practices. The scanning logic is appropriately scoped to non-sensitive project files and uses standard libraries.
  • [COMMAND_EXECUTION]: The skill automates image optimization by generating shell commands. The generation process uses shlex.quote in generate-sharp-plan.py to ensure that file names and parameters are correctly escaped, preventing potential command injection from malformed project filenames.
  • [EXTERNAL_DOWNLOADS]: The instructions involve the use of sharp-cli via npx. This is a well-known and widely used utility for image processing in professional development environments, and its use is consistent with the stated purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 02:25 PM
Security Audit — agent-trust-hub — image-optimization