baoyu-compress-image
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local system binaries including sips, cwebp, and convert (ImageMagick) to perform image compression. These commands are invoked using secure argument arrays to prevent shell injection.
- [EXTERNAL_DOWNLOADS]: The skill instructions suggest using npx -y bun to ensure the Bun runtime is available. The script also dynamically imports the sharp library as a fallback processing engine.
Audit Metadata