favicon
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses the ImageMagick
magicktool for image processing tasks. The shell commands are standard for resizing and format conversion and are scoped strictly to the favicon generation workflow. - [EXTERNAL_DOWNLOADS]: Mentions installing dependencies via Homebrew or APT in the prerequisites section. These are trusted, official package managers for macOS and Linux.
- [PRIVILEGE_ESCALATION]: References the use of
sudoin documentation for manual installation of ImageMagick by the user. There is no evidence of automated or hidden privilege escalation attempts within the skill's logic. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data such as source image paths and project configuration files (e.g.,
package.json). Ingestion points: Source image file path and project manifest files. Boundary markers: Uses double-quoted template placeholders in documentation to suggest safe path handling. Capability inventory: File system access and shell command execution using the allowed Bash tool. Sanitization: Relies on standard agent quoting conventions and user confirmation for target paths.
Audit Metadata