tesseract-design

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the Tesseract CLI binary and a SHA-256 checksum file from the vendor's GitHub releases.
  • Evidence: references/installation.md directs the agent to download assets from https://github.com/mirage-hq/tesseract/releases/download/v<VERSION>/ based on the version pinned in references/cli-version.txt.
  • [REMOTE_CODE_EXECUTION]: The installation guide instructs the agent to execute setup scripts (install.sh or install.ps1) included in the downloaded archive.
  • Evidence: references/installation.md provides platform-specific commands to run the installer after verifying the checksum, including the use of -ExecutionPolicy Bypass for the PowerShell script on Windows.
  • [COMMAND_EXECUTION]: The skill manages visual designs by invoking the local tsrct command-line utility for project operations and rendering.
  • Evidence: SKILL.md and references/static-authoring.md describe using commands like tsrct project create, tsrct project commit, and tsrct preview to generate PNG deliverables.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 08:40 AM