hal-image
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line utilities for image manipulation.
- Utilizes
magick,identify,oxipng, andjpegoptimto perform its primary functions. - Includes safe shell scripting patterns for finding system fonts and performing batch operations.
- [EXTERNAL_DOWNLOADS]: Recommends tool installation from a well-known service.
- Provides instructions to install utilities via Homebrew (
brew install), which is a trusted package manager. - [DATA_EXFILTRATION]: Employs privacy-preserving practices.
- Explicitly instructs the agent to "Never expose local paths to the user," preventing the disclosure of host system directory structures and metadata.
Audit Metadata