Skills
Navigate
skills/promovaweb/brandfy/brandfy-tipografia-web/Gen Agent Trust Hub

brandfy-tipografia-web

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/download-fonts.mjs fetches font files from remote URLs defined in a .brandfy/fonts.json manifest. The script correctly enforces HTTPS for all downloads and provides optional SHA-256 hash verification to ensure file integrity.
  • [COMMAND_EXECUTION]: The skill instructions involve executing a local Node.js script (scripts/download-fonts.mjs) to process the font manifest and generate files.
  • [SAFE]: The script implements security best practices for file operations. It includes a filename validator (safeFileName) that prevents path traversal attacks by ensuring font filenames are restricted to safe characters and do not contain path segments. It also resolves output paths using path.resolve and path.join correctly.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 10:18 PM
Security Audit — agent-trust-hub — brandfy-tipografia-web