fontize
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official npm packages including @fontize/nuxt, @fontize/vite, @fontize/vue, and nostics. These dependencies are necessary for the tool's font subsetting functionality and are installed using standard package managers.
- [COMMAND_EXECUTION]: Shell commands provided in the references are limited to package installation (pnpm add) and build execution using standard environment variables (e.g., NUXT_SPA=1).
- [SAFE]: No instances of prompt injection, data exfiltration, or code obfuscation were found. The character collection mechanism described (/__fontize/collect) is an internal development utility for hot-module replacement and does not communicate with external unauthorized domains.
Audit Metadata