baoyu-compress-image
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes external image processing utilities including 'sips', 'cwebp', and 'convert' using 'child_process.spawn' to perform the requested image optimizations.
- [COMMAND_EXECUTION]: The script uses the 'which' command to verify the availability of compression tools on the host system.
- [EXTERNAL_DOWNLOADS]: The documentation mentions using 'npx -y bun' as a fallback runtime, which involves downloading the 'bun' package from the official npm registry.
Audit Metadata