lov-maintain-partners

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/audit_partners.py uses subprocess.run to execute the curl command. This is used specifically to probe partner URLs for HTTP health checks (dead link detection), which is a core feature of the skill's audit functionality.
  • [EXTERNAL_DOWNLOADS]: The documentation (README.md and SKILL.md) instructs the user to install standard development dependencies, including the Pillow Python library via pip and librsvg via Homebrew for SVG processing.
  • [DATA_EXPOSURE]: The skill accesses a local configuration file (~/.skill-publisher/skills/profile.json) and specific environment variables to resolve the path to the website repository. This is a standard practice for local development tools to manage workspace configurations.
  • [COMMAND_EXECUTION]: The skill workflow instructions in SKILL.md include shell commands for image processing (e.g., rsvg-convert) and file manipulation (e.g., sed for SVG cleanup). These are standard operations for the intended purpose of logo normalization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:55 AM
Security Audit — agent-trust-hub — lov-maintain-partners