iblai-vibe-iconography

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents several shell commands for icon generation and environment setup.
  • Includes standard package manager commands for installing ImageMagick (brew install, sudo apt install, pacman -S, dnf install, winget install).
  • Uses pnpm exec tauri icon for standard icon generation.
  • Includes a command to clean the build target directory (rm -rf src-tauri/target).
  • These commands are standard for the described development workflow.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file access or credential exposure was detected. The skill operates on local image files and writes to a specific project directory (src-tauri/icons/).
  • [REMOTE_CODE_EXECUTION]: No remote script execution or downloads from untrusted sources were found. All mentioned tools are well-known development utilities.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests a source image file (logo.png) to process into multiple sizes. While the tool lacks explicit sanitization for image metadata, the risk of indirect injection via image processing in this context is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 04:26 PM
Security Audit — agent-trust-hub — iblai-vibe-iconography