extension-assets

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses ImageMagick's convert and identify utilities via bash loops to batch resize and validate locally generated images. These tasks use hardcoded layout specifications and input filenames.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing standard node package sharp to convert SVG to PNG icons. This is safe and follows package registry practices.
  • [DATA_EXFILTRATION]: Contains instructions to reference a local environmental variable GEMINI_API_KEY to interact with Gemini API for asset description or prompts, with no remote exfiltration mechanisms or hidden destinations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:33 PM