favicon-generator

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a documentation resource for implementing favicons. It does not contain any executable scripts, command line instructions, or network-enabled operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains an instruction to read local project context files (.claude/project-context.md or .cursor/project-context.md) to align with a project's brand identity. While this represents a data ingestion point for untrusted local content, the skill does not possess any capabilities (such as network access, file modification, or command execution) that could be exploited via this surface. The risk associated with this pattern is negligible.
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation from Google Search Central and points users toward established web tools like RealFaviconGenerator and favicon.io. These are well-known industry resources and are included for informational purposes rather than automated execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 07:23 AM