Skills
Navigate
skills/full-aigc-skills/vectorcraft-skills/vectorcraft-trace-artwork/Gen Agent Trust Hub

vectorcraft-trace-artwork

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external portable binary archive for the vectorcraft CLI tool (vectorcraft-0.12.0-windows-x64-portable.zip) located at https://github.com/storytold/vectorcraft/releases/download/v0.12.0/. A SHA256 hash (fde42c30d14aadbb565cf0551f72f251321f8c9f875a24811b98e522aea6fe88) is provided in references/craft-command-evidence.json for integrity verification.
  • [COMMAND_EXECUTION]: The skill utilizes the run_command and command_run tools to execute the vectorcraft-cli.exe binary. These commands are used to perform bitmap tracing, path simplification, and file management as part of the vectorization process.
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file suggests using npx to install a related skill from the vendor's repository (npx skills add full-aigc-skills/vectorcraft-skills). The use of npx involves downloading and executing packages from the NPM registry during the setup phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:11 PM