khe-sticker
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a professional-grade design utility. It contains comprehensive technical documentation and a Node.js validation script that operates locally on sticker assets. No obfuscation or malicious instructions were found.\n- [COMMAND_EXECUTION]: The validation script
scripts/sticker-check.mjsusesnode:child_process.spawnSyncto executeffprobefor validating metadata in WebM video stickers. This is a documented functional requirement and uses safe argument-array handling to prevent shell injection.\n- [DYNAMIC_EXECUTION]: The validation logic uses standard JSON parsing and regular expressions to inspect asset files. No unsafe dynamic execution patterns, such aseval, were identified in the codebase or instructions.
Audit Metadata