logo-designer
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile includes a mandatory 'Repo Sync Before Edits' block that executes shell commands (git rev-parse,git status,git stash,git fetch,git pull). These are standard git operations intended for keeping a local repository in sync with its remote origin before the agent makes changes. The implementation uses a shell variablebranchto scope the pull operation and stashes local changes, which is a defensive coding practice. - [EXTERNAL_DOWNLOADS]: The
docs/README.mdfile provides installation instructions usingnpxandasm. The download targets the author's official GitHub repository (github:luongnv89/skills). As these references point to the vendor's own infrastructure for the purpose of skill distribution, they are documented as normal functional behavior. - [DATA_EXPOSURE]: The
agents/brand-researcher.mdagent is designed to read project metadata files (package.json,README.md,pyproject.toml, etc.) and configuration files (tailwind.config.js,brand_kit.md) to extract branding information. This file access is scoped to the project directory and is fundamental to the skill's primary purpose of logo design based on project context.
Audit Metadata