image-to-vector
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/vectorize-image.pyexecutes external binaries such asvtracer,magick(ImageMagick), andsvgousingsubprocess.run(). It follows security best practices by passing arguments as a list and avoiding the use ofshell=True, which effectively mitigates command injection risks.\n- [EXTERNAL_DOWNLOADS]: The skill contains logic insvgo_commandto utilizenpx --yes svgoto download and execute thesvgooptimizer from the official npm registry if it is not found on the local path. This is a standard practice for managing lightweight dependencies in development environments.\n- [SAFE]: The skill adheres to best practices for local file manipulation and tool wrappers. It utilizespathlibfor secure path resolution and implements specific validation logic to ensure that vectorization parameters (e.g., speckle filter, segment length) remain within the safe bounds expected by the underlying engine.
Audit Metadata