image-ops
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Dynamic Library Loading: The script dynamically loads the
sharpimage processing library using a computed path based on an environment variable or a default system directory (/opt/design-agent/render). This pattern is used to interface with the host's optimized rendering toolchain. - Restricted Dynamic Method Invocation: The skill includes a
--pipeoption that allows for complex image processing chains defined in JSON. To prevent misuse, the script enforces a strict allowlist (PIPE_ALLOW) of permittedsharpmethods, ensuring that only safe image operations can be invoked. - File System Interaction: The skill performs standard file system operations, including reading input images, reading brand token configuration files, and writing processed results to the workspace. These actions are consistent with the skill's stated purpose as a CLI image editor.
Audit Metadata