Skills
skills/basiclines/rampa-studio/rampa-colors/Gen Agent Trust Hub

rampa-colors

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @basiclines/rampa package. This resource is provided by the same vendor as the skill, making it a verified and expected dependency.
  • [COMMAND_EXECUTION]: The skill provides a wrapper script (scripts/generate.sh) to execute the color generation tool. The script uses double-quoting for all user-provided variables, which prevents shell word splitting and command injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 11:23 PM