lov-image-decorator

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a test suite in tests/test_decorate_image.py that utilizes subprocess.run to validate the CLI script. This is a standard and safe practice for ensuring tool reliability.
  • [DATA_EXFILTRATION]: No network-related code was identified. The skill's documentation and implementation confirm that it operates exclusively on local image files and resources.
  • [CREDENTIALS_UNSAFE]: The profile persistence logic in scripts/profile_store.py proactively prevents the storage of sensitive information such as tokens or passwords by filtering for specific sensitive keywords.
  • [DYNAMIC_EXECUTION]: The scripts/validate_skill.py utility employs yaml.safe_load for processing skill manifests, which effectively mitigates risks associated with untrusted YAML data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 04:28 PM