vectorcraft-cli-text
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs a maintenance version of the VectorCraft CLI (v0.2.0-craft.2) and its companion harness skill from the vendor's GitHub organization (full-aigc-skills/vectorcraft-skills). These are required for the skill's primary graphics processing functions.\n- [COMMAND_EXECUTION]: It utilizes Python scripts (bootstrap.py, workflow.py, and commands.py) to manage the installation of the native CLI and execute vector editing commands in an isolated environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON plans to define graphics operations. It mitigates the risk of processing malicious project data by enforcing a project integrity check (expectedProjectSha256) which verifies the project's state before any revision operations are performed.
Audit Metadata