kotlin-multiplatform-imagevector-generator

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/convert_image_to_imagevector.py executes the potrace command-line utility via subprocess.run. This is used as a fallback for monochrome image tracing and is executed with internally generated temporary file paths.
  • [EXTERNAL_DOWNLOADS]: The SKILL.md instructions and references/heroicons-catalog.md document how to fetch SVG assets from the Tailwind Labs organization on GitHub. These references target a well-known service and are used for legitimate asset retrieval.
  • [EXTERNAL_DOWNLOADS]: The skill identifies several Python dependencies, including vtracer, Pillow, and picosvg, which are standard libraries used for image quantization, tracing, and SVG normalization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 03:15 AM
Security Audit — agent-trust-hub — kotlin-multiplatform-imagevector-generator