kelly-portrait-retouch
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/retouch.mjsutility executes a local Swift script (scripts/detect-faces.swift) via theswiftcommand. This is used specifically on macOS to leverage the native Vision framework for high-accuracy face detection, which is a core functional requirement of the retouching workflow. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
sharplibrary for image processing. During the installation process viapnpm, this package may download pre-compiled platform-specific binaries for the libvips image processing engine from official and well-known repositories. - [DATA_EXPOSURE]: The skill correctly implements privacy best practices by stripping EXIF/GPS metadata from processed images by default. It manages Busabase authentication through standard environment variables (
BUSABASE_API_KEY, etc.), ensuring sensitive credentials are not hardcoded in the skill's logic or frontmatter.
Audit Metadata