baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/main.ts invokes system-level image processing utilities including sips, cwebp, and ImageMagick (convert) via subprocesses. It passes user-provided file paths as arguments to these commands.
  • [DYNAMIC_EXECUTION]: The script uses a dynamic import() call to load the sharp library during image processing tasks, which is a standard pattern for handling optional dependencies or late-loading libraries in Node.js.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts file and directory paths as input arguments, creating an ingestion surface for potentially untrusted filesystem data.
  • Ingestion points: opts.input argument in scripts/main.ts which is resolved to an absolute path.
  • Boundary markers: None present as the skill operates as a CLI tool rather than a prompt-generating agent.
  • Capability inventory: The skill uses child_process.spawn for command execution and fs modules for unlinkSync (deleting original files) and renameSync (moving compressed output).
  • Sanitization: Input paths are resolved using path.resolve, and command arguments are passed as a list to spawn which mitigates shell injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:33 PM