tesseract-design
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Tesseract CLI binary and a SHA-256 checksum file from the vendor's GitHub releases.
- Evidence:
references/installation.mddirects the agent to download assets fromhttps://github.com/mirage-hq/tesseract/releases/download/v<VERSION>/based on the version pinned inreferences/cli-version.txt. - [REMOTE_CODE_EXECUTION]: The installation guide instructs the agent to execute setup scripts (
install.shorinstall.ps1) included in the downloaded archive. - Evidence:
references/installation.mdprovides platform-specific commands to run the installer after verifying the checksum, including the use of-ExecutionPolicy Bypassfor the PowerShell script on Windows. - [COMMAND_EXECUTION]: The skill manages visual designs by invoking the local
tsrctcommand-line utility for project operations and rendering. - Evidence:
SKILL.mdandreferences/static-authoring.mddescribe using commands liketsrct project create,tsrct project commit, andtsrct previewto generate PNG deliverables.
Audit Metadata