favicon

The skill's footprint is coherent with its stated purpose: it validates a source image, determines the project's static assets location, generates a full favicon set via ImageMagick, creates/updates site.webmanifest, and updates framework-specific HTML to reference the new assets. The data flows are strictly local (no credentials, no external endpoints). The only potential risk is misidentification of project type in complex repos, which the instruction mitigates by recommending user confirmation when unsure. Overall, this is BENIGN with low security risk and no malware indicators.