font-extractor

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is designed to fetch font files (e.g., .woff2, .ttf, .otf) from external URLs discovered on target websites using curl and Python's urllib library.
  • [COMMAND_EXECUTION]: The workflow involves executing standard shell commands such as mkdir for directory creation, curl for downloading, and find for reporting. It also runs a bundled Python script (organize_fonts.py) using the uv tool to process font metadata locally.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill makes network requests to download fonts, it does not attempt to access sensitive files or exfiltrate local data. All network activity is directed toward the target website or its CDNs to retrieve font assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 06:31 PM