visant-preflight
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation instructs the user to execute a local Node.js script (
scripts/preflight-scan.mjs) to automate asset checks. The script performs recursive directory walking and reads file headers to determine image dimensions. - [EXTERNAL_DOWNLOADS]: The script performs network requests to
fonts.googleapis.comto verify if specific font families are available. This is a well-known service and the request only transmits the font family name as a query parameter. - [DATA_EXPOSURE]: The script reads local files within a directory specified by the user via the
--assetsflag. It processes image files (PNG, JPEG, WebP, SVG) to extract metadata (width, height, size). No sensitive data or credentials are accessed or transmitted.
Audit Metadata