humation-avatar
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several Node.js packages within the
@humationscope, including@humation/react,@humation/core, and@humation/web-component. These are standard library dependencies provided by the skill's author. - [COMMAND_EXECUTION]: Provides a command using
npx shadcnto add an 'avatar-builder' component directly from the vendor's GitHub repository (humation-labs/humation). This is a documented method for component distribution in modern web development. - [DATA_EXPOSURE]: The skill uses a
seed(such asuser.id) for deterministic rendering. While this involves user identifiers, the rendering is performed locally in the browser/app as an SVG engine, avoiding remote API calls that would typically expose such data to a third party.
Audit Metadata