Skills
Navigate
skills/full-aigc-skills/designcraft-skills/designcraft-data-merge-badges/Gen Agent Trust Hub

designcraft-data-merge-badges

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads font files and their respective licenses from public GitHub repositories managed by well-known projects (e.g., notofonts/noto-cjk and lxgw/LxgwWenKai). The scripts/fetch_font.py script implements a security check that verifies each downloaded file against a hardcoded SHA256 hash provided in references/font-source.json and references/web-font-source.json to ensure the integrity of the assets.
  • [COMMAND_EXECUTION]: The scripts/build_badges.py script facilitates badge generation by executing a user-provided CLI executable (designcraft-cli). It uses subprocess.run with a list of arguments to pass specific instructions via temporary JSON files. This behavior is central to the skill's purpose as a wrapper for the design tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:40 PM