Skills
Navigate
skills/freestylefly/canghe-skills/canghe-compress-image/Gen Agent Trust Hub

canghe-compress-image

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses child_process.spawn to execute image optimization utilities such as sips, cwebp, and ImageMagick (convert). Subprocesses are spawned using argument arrays, which effectively mitigates the risk of command injection through malicious filenames.
  • [SAFE]: File operations, including reading configuration from EXTEND.md and renaming original files for backup, are performed using standard filesystem APIs in a predictable manner. The skill's behavior matches its stated purpose of image compression without any hidden or suspicious activities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:45 AM