heic-to-jpeg-bundle
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on local macOS system binaries, specifically
sipsfor image resampling andzipfor archive creation. These are standard tools used for their intended purposes. - [CREDENTIALS_UNSAFE]: The script implements ZIP encryption using the
zip -Pflag. This practice is noted as a best-practice violation because the password may be visible in plain text to other users via process monitoring tools likeps. However, the skill explicitly describes this as a 'light access gate' intended for recipient convenience. - [SAFE]: The script includes a robust character folding mechanism using
perl -CSDto ensure the generated HTML gallery contains only ASCII characters (using numeric entities for others). This is a proactive security measure that prevents encoding-related vulnerabilities and 'mojibake' corruption. - [SAFE]: Input handling for the gallery title includes standard HTML escaping (
&,<,>,") to prevent basic injection attacks in the generated web page. - [SAFE]: The skill does not perform any network operations, external downloads, or privilege escalation. It uses locally available tools and operates within the user's file system context.
Audit Metadata