Skills
skills/jimliu/baoyu-skills/baoyu-compress-image/Gen Agent Trust Hub

baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill operates as an image optimization tool, processing local files into more efficient formats like WebP. It does not perform any network operations or access sensitive system credentials.- [COMMAND_EXECUTION]: The script executes local image processing binaries such as sips, cwebp, and convert (ImageMagick) using the child_process.spawn method. It correctly uses argument arrays rather than shell strings, which prevents command injection vulnerabilities.- [DATA_EXFILTRATION]: No network requests are made by the skill's scripts. All processing is performed locally on the user's filesystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 12:01 AM