skills/hktitan/skills/khe-sticker/Gen Agent Trust Hub

khe-sticker

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a professional-grade design utility. It contains comprehensive technical documentation and a Node.js validation script that operates locally on sticker assets. No obfuscation or malicious instructions were found.\n- [COMMAND_EXECUTION]: The validation script scripts/sticker-check.mjs uses node:child_process.spawnSync to execute ffprobe for validating metadata in WebM video stickers. This is a documented functional requirement and uses safe argument-array handling to prevent shell injection.\n- [DYNAMIC_EXECUTION]: The validation logic uses standard JSON parsing and regular expressions to inspect asset files. No unsafe dynamic execution patterns, such as eval, were identified in the codebase or instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 03:45 PM