asset-optimization

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides documentation and shell commands for auditing and converting assets (e.g., find, du, ffmpeg, texconv). These are standard operations for the stated purpose of asset optimization.
  • [COMMAND_EXECUTION]: Includes a Python script in SKILL.md that uses subprocess.run with argument lists to execute external tools. The use of argument lists instead of shell strings is a secure practice that prevents shell injection attacks from malicious filenames.
  • [EXTERNAL_DOWNLOADS]: Recommends installing @squoosh/cli from the npm registry. Squoosh is a reputable, well-known image optimization tool maintained by Google Chrome Labs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:13 PM
Security Audit — agent-trust-hub — asset-optimization