better-icons
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
better-iconspackage via npm or Bun, which are well-known package registries. - [COMMAND_EXECUTION]: The CLI provides tools to search for icons and retrieve SVG content, executing commands like
better-icons searchandbetter-icons get. - [COMMAND_EXECUTION]: The
sync_iconandbetter-icons setuptools involve writing to the file system (e.g., updating project files with icon components or modifying agent configuration for MCP setup). - [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface as it processes external data such as search queries and project file content (
scan_project_icons) without explicit boundary markers to delimit untrusted data.
Audit Metadata