drawing-with-pycairo
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute system utilities necessary for its graphics operations. Inscripts/cairokit.py,ffmpegis used to encode image sequences into MP4 videos. Inscripts/selftest.py,fc-matchis used to find font file paths on the system. These calls use list-based arguments, which is a security best practice that prevents shell injection attacks.\n- [EXTERNAL_DOWNLOADS]: The skill's setup instructions include installing standard, well-known Python packages from public registries. These includepycairo,numpy,uharfbuzz,fonttools, andskia-pathops, which are all relevant and necessary for the stated purpose of advanced image and vector drawing.
Audit Metadata