drawing-with-pycairo

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to execute system utilities necessary for its graphics operations. In scripts/cairokit.py, ffmpeg is used to encode image sequences into MP4 videos. In scripts/selftest.py, fc-match is used to find font file paths on the system. These calls use list-based arguments, which is a security best practice that prevents shell injection attacks.\n- [EXTERNAL_DOWNLOADS]: The skill's setup instructions include installing standard, well-known Python packages from public registries. These include pycairo, numpy, uharfbuzz, fonttools, and skia-pathops, which are all relevant and necessary for the stated purpose of advanced image and vector drawing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:44 PM