darwin-skill

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a local utility for optimizing other SKILL.md files within the user's environment. All operations (evaluation, optimization, testing, and reporting) are conducted on local files using standard tools such as git.
  • [COMMAND_EXECUTION]: The script 'scripts/screenshot.mjs' utilizes 'child_process.execSync' to execute the 'open' command. This is used solely to display the generated performance report card to the user on macOS systems.
  • [EXTERNAL_DOWNLOADS]: The HTML reporting templates reference Google Fonts via 'fonts.googleapis.com' and 'fonts.gstatic.com'. These are well-known and trusted services used for visual rendering and do not pose a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 03:47 PM
Security Audit — agent-trust-hub — darwin-skill