theme-factory
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides static configuration for themes (colors and fonts) and lacks any executable code, network operations, or sensitive file access.
- [SAFE]: Usage instructions explicitly forbid automatic downloading or installation of fonts, directing the agent to use local fallbacks and verify licensing, which mitigates remote code execution and licensing risks.
- [SAFE]: The process for creating custom themes includes a mandatory 'review and verification' step by the user before any styling is applied, serving as a human-in-the-loop mitigation against potentially malicious or malformed inputs.
- [SAFE]: The skill enforces workspace isolation by instructing the agent to create custom palettes only within the task workspace rather than within the skill's own internal directory, preventing unauthorized persistence or modification of the skill's state.
Audit Metadata