build-asset-library
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the creation of a visual asset library and includes a utility script (
scripts/build_gallery.py) for gallery generation. The script correctly useshtml.escapeandurllib.parse.quoteto sanitize data from the manifest file, mitigating risks associated with untrusted data injection. - [SAFE]: Directory traversal protections are implemented in the file processing logic. The script uses
pathlib.Path.resolve()andis_relative_to()to ensure that both input files (referenced in the manifest) and the generated output HTML remain confined within the designated library directory. - [SAFE]: The skill operates entirely within the local environment. No external network operations, remote script downloads, or third-party package dependencies were identified.
Audit Metadata