better-icons
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to install the
better-iconspackage from public registries using npm or Bun (e.g.,npm install -g better-icons). - [COMMAND_EXECUTION]: The skill defines a Command Line Interface (CLI) and Model Context Protocol (MCP) tools that execute shell commands to search, retrieve, and download icons.
- [SAFE]: The skill retrieves icon data and SVG files from
https://api.iconify.design, which is a well-known and established public service for icon libraries. - [DATA_EXPOSURE]: The
sync_iconandscan_project_iconstools interact with local project files to add icons or list existing ones, which is expected behavior for a developer tool managing assets.
Audit Metadata