asset-optimization
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and shell commands for auditing and converting assets (e.g.,
find,du,ffmpeg,texconv). These are standard operations for the stated purpose of asset optimization. - [COMMAND_EXECUTION]: Includes a Python script in
SKILL.mdthat usessubprocess.runwith argument lists to execute external tools. The use of argument lists instead of shell strings is a secure practice that prevents shell injection attacks from malicious filenames. - [EXTERNAL_DOWNLOADS]: Recommends installing
@squoosh/clifrom the npm registry. Squoosh is a reputable, well-known image optimization tool maintained by Google Chrome Labs.
Audit Metadata