generate-logo
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool, restricted to Node.js, to execute logic contained in lib/logo.mjs and lib/brand.mjs for generating SVG assets.
- [EXTERNAL_DOWNLOADS]: The skill mentions sharp as an optional Node.js dependency for rasterizing images, which is a widely used and reputable image processing library.
- [SAFE]: All vector processing and generation are performed locally; the skill explicitly states that no account, key, or network access is required.
- [SAFE]: The skill implements security best practices by requiring HTML-escaping for user-provided text and performing validation on brand profile data before processing.
- [SAFE]: Data ingestion points are limited to local brand JSON files and user-provided text arguments, while capabilities are restricted to writing SVG files and executing local scripts.
Audit Metadata