font-extractor
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch font files (e.g., .woff2, .ttf, .otf) from external URLs discovered on target websites using
curland Python'surlliblibrary. - [COMMAND_EXECUTION]: The workflow involves executing standard shell commands such as
mkdirfor directory creation,curlfor downloading, andfindfor reporting. It also runs a bundled Python script (organize_fonts.py) using theuvtool to process font metadata locally. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill makes network requests to download fonts, it does not attempt to access sensitive files or exfiltrate local data. All network activity is directed toward the target website or its CDNs to retrieve font assets.
Audit Metadata