baoyu-compress-image
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script executes image processing utilities such as sips, cwebp, and convert using child_process.spawn. This implementation is secure against command injection because it avoids shell invocation and passes arguments as a discrete array.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the well-known sharp library for image processing and is executed via npx, which are standard and trusted components of the Node.js ecosystem.\n- [SAFE]: The skill performs routine file system operations, including reading, writing, and renaming files, which are entirely consistent with its documented functionality for image optimization.
Audit Metadata