baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The script executes image processing tools such as sips, cwebp, and convert. It correctly uses child_process.spawn with argument arrays to prevent shell injection vulnerabilities.\n- [DYNAMIC_EXECUTION]: The script uses dynamic importing to load the sharp library as an optional fallback for image processing. The import uses a static string and follows standard patterns for optional dependency loading.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 15, 2026, 02:55 AM

Security Audit — agent-trust-hub — baoyu-compress-image