tone-shifter
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a utility for rewriting text into different tones and displaying the result in a local UI.- [SAFE]: The webview implementation in assets/webview.html uses document.getElementById().textContent to render user-provided and agent-generated data. This approach prevents Cross-Site Scripting (XSS) by ensuring that data is treated as literal text rather than executable HTML or scripts.- [SAFE]: All operations are performed locally using the run_js tool to bridge data to the webview. No network exfiltration, unauthorized file access, or remote code execution patterns were detected.
Audit Metadata