nerd-fonts
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches glyph data, release assets, and the font-patcher tool from the official Nerd Fonts GitHub repository (ryanoasis/nerd-fonts). These downloads are necessary for the skill's primary purpose of icon font management.\n- [COMMAND_EXECUTION]: Provides instructions for running the font-patcher script and utilizing cargo to manage font snapshots. The commands are standard for the tool's intended use and are limited to local processing of font files.\n- [PRIVILEGE_ESCALATION]: Includes standard sudo commands in the context of font installation via system package managers on Linux. This is a routine and expected administrative task for the described workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user configuration files through the /nerd-fonts command to suggest icon replacements. Ingestion points include local terminal and editor configuration files; boundary markers are defined by the specific review command structure; capabilities are limited to file analysis and terminal output; no unsafe interpolation of external content into system commands is performed.
Audit Metadata