extension-assets
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses ImageMagick's
convertandidentifyutilities via bash loops to batch resize and validate locally generated images. These tasks use hardcoded layout specifications and input filenames. - [EXTERNAL_DOWNLOADS]: The skill recommends installing standard node package
sharpto convert SVG to PNG icons. This is safe and follows package registry practices. - [DATA_EXFILTRATION]: Contains instructions to reference a local environmental variable
GEMINI_API_KEYto interact with Gemini API for asset description or prompts, with no remote exfiltration mechanisms or hidden destinations.
Audit Metadata