lovstudio-find-logo
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is implemented entirely with Python's standard library (urllib, html.parser, argparse), avoiding the risks associated with third-party dependencies.
- [EXTERNAL_DOWNLOADS]: The skill fetches public brand assets from well-known and trusted services.
- Downloads logos from
logo.clearbit.comandgoogle.com's favicon service. - Scrapes brand websites for metadata-defined images (
og:image,twitter:image,favicon). - Implements a 10-second timeout on all network requests to prevent resource exhaustion.
- [COMMAND_EXECUTION]: Local script execution is restricted to the specific
find_logo.pytool. The script employs aslugifyfunction to sanitize input strings before using them in filesystem operations, preventing directory traversal or command injection through filenames. - [DATA_EXFILTRATION]: No sensitive file access or credential harvesting patterns were detected. File operations are confined to the dedicated
~/.lovstudio/logo-collection/directory.
Audit Metadata