gravit-designer-security-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security education tool, teaching users how to identify malware distribution patterns. It correctly identifies red flags such as misleading value propositions, suspicious download redirects, and artificial popularity.
- [SAFE]: The code snippets provided are defensive or educational in nature. For example, it includes Python scripts for verifying file hashes (SHA256), checking PE (Portable Executable) headers for suspicious imports using
pefile, and demonstrating legitimate license validation patterns using standard environment variables. - [SAFE]: The skill promotes secure and ethical software usage by directing users to official sites (designer.io, inkscape.org) and providing installation commands for verified open-source software like Inkscape through standard package managers (
apt,brew,dnf,pacman). - [SAFE]: Instructions regarding API keys (e.g.,
VIRUSTOTAL_API_KEY,OPENAI_API_KEY) emphasize best practices by using environment variables rather than hardcoding credentials. - [SAFE]: The skill provides actionable remediation and reporting steps for users to report malicious repositories to GitHub abuse teams, furthering community security.
Audit Metadata