build-asset-library

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the creation of a visual asset library and includes a utility script (scripts/build_gallery.py) for gallery generation. The script correctly uses html.escape and urllib.parse.quote to sanitize data from the manifest file, mitigating risks associated with untrusted data injection.
  • [SAFE]: Directory traversal protections are implemented in the file processing logic. The script uses pathlib.Path.resolve() and is_relative_to() to ensure that both input files (referenced in the manifest) and the generated output HTML remain confined within the designated library directory.
  • [SAFE]: The skill operates entirely within the local environment. No external network operations, remote script downloads, or third-party package dependencies were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 02:39 AM