huashu-design
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill fetches design assets and public domain imagery from well-known and trusted sources such as Wikimedia Commons and Google Fonts.- [SAFE]: It utilizes established browser automation frameworks (Playwright) and standard media tools (ffmpeg, ffprobe) for rendering, verifying, and exporting design work.- [SAFE]: Communication with external services, such as the ByteDance TTS API, is performed using legitimate endpoints and follows secure practices by requiring API keys to be stored in environment variables rather than hardcoded.- [SAFE]: All software dependencies are sourced from established package registries (NPM) and well-known CDNs (unpkg.com).- [SAFE]: The documentation includes proactive security advice, instructing users on how to manage personal brand assets privately and avoid accidental exposure during distribution.
Audit Metadata