Skills
skills/guanyang/antigravity-skills/baoyu-compress-image/Gen Agent Trust Hub

baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes external image processing tools (sips, cwebp, and ImageMagick's convert) using the child_process.spawn method. Arguments, including user-provided file paths, are passed as arrays rather than shell strings, which effectively prevents command injection attacks.
  • [SAFE]: The skill reads configuration from local EXTEND.md files in standard locations (project root, XDG config, or home directory) to manage user preferences. This behavior is localized and consistent with the tool's purpose.
  • [SAFE]: No network operations, data exfiltration patterns, or obfuscated code were detected. The skill's behavior matches its described functionality of optimizing and converting image files.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 05:27 PM
Security Audit — agent-trust-hub — baoyu-compress-image