app-icon-rasterize
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard macOS command-line utilities including
qlmanage,sips,mkdir,cp, andmv. These tools are used for their intended purpose of image processing and file management within the project directory. - [PROMPT_INJECTION]: The skill processes SVG files provided as input. While processing external data is a potential attack surface for indirect prompt injection or rendering exploits, this behavior is central to the skill's primary function of asset conversion and involves standard system utilities.
- Ingestion points: SVG files sourced from the
../tmp/directory. - Boundary markers: None identified.
- Capability inventory: Local file operations and image rasterization via
qlmanageandsips. - Sanitization: The instructions recommend simplifying SVG content for reliable rendering but do not include security-specific sanitization of the XML input.
Audit Metadata