web-asset-generator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
scripts/generate_favicons.py,scripts/generate_og_images.py) and utilizes shell commands such asfind,grep, andcpto manage assets and detect the project framework.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing untrusted user input to generate assets and modify codebase files. \n - Ingestion points: User-provided slogans, descriptions, and uploaded logo images (SKILL.md). \n
- Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore embedded content in user data. \n
- Capability inventory: Execution of Python scripts, file copying to output directories, and file modification of project layouts (e.g., app/layout.tsx) using the agent's editing tools. \n
- Sanitization: Absent; the skill relies on the user to manually review the generated code diffs before applying changes to the project.\n- [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing standard Python libraries (
Pillow,pilmoji,emoji) from official registries to handle image and emoji processing.
Audit Metadata