lov-image-decorator
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a test suite in
tests/test_decorate_image.pythat utilizessubprocess.runto validate the CLI script. This is a standard and safe practice for ensuring tool reliability. - [DATA_EXFILTRATION]: No network-related code was identified. The skill's documentation and implementation confirm that it operates exclusively on local image files and resources.
- [CREDENTIALS_UNSAFE]: The profile persistence logic in
scripts/profile_store.pyproactively prevents the storage of sensitive information such as tokens or passwords by filtering for specific sensitive keywords. - [DYNAMIC_EXECUTION]: The
scripts/validate_skill.pyutility employsyaml.safe_loadfor processing skill manifests, which effectively mitigates risks associated with untrusted YAML data.
Audit Metadata