huashu-design
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches assets from well-known and trusted sources, including Wikimedia Commons for public domain images, Google Fonts for typography, and dedicated developer resources like svgl.app for brand logos. These actions are performed to provide authentic content for design tasks and follow established safety guidelines.
- [COMMAND_EXECUTION]: Local utility scripts utilize standard system tools such as FFmpeg for audio/video processing and Playwright for browser-based rendering. This functionality is essential for the skill's core purpose of exporting HTML designs to MP4, PDF, and PPTX formats, and operates entirely on local or trusted remote assets.
- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (documented in .env.example) to handle API keys for text-to-speech services, adhering to secure development practices for secret management.
Audit Metadata