favicon

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses the ImageMagick magick tool for image processing tasks. The shell commands are standard for resizing and format conversion and are scoped strictly to the favicon generation workflow.
  • [EXTERNAL_DOWNLOADS]: Mentions installing dependencies via Homebrew or APT in the prerequisites section. These are trusted, official package managers for macOS and Linux.
  • [PRIVILEGE_ESCALATION]: References the use of sudo in documentation for manual installation of ImageMagick by the user. There is no evidence of automated or hidden privilege escalation attempts within the skill's logic.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data such as source image paths and project configuration files (e.g., package.json). Ingestion points: Source image file path and project manifest files. Boundary markers: Uses double-quoted template placeholders in documentation to suggest safe path handling. Capability inventory: File system access and shell command execution using the allowed Bash tool. Sanitization: Relies on standard agent quoting conventions and user confirmation for target paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 01:20 AM