optimo
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
optimopackage vianpxfor one-off command execution. Since the package is a resource provided by the vendor (microlinkhq), this constitutes standard functionality. - [COMMAND_EXECUTION]: The utility executes media processing pipelines by calling system-installed binaries such as
ffmpeg,magick(ImageMagick),svgo,mozjpegtran, andgifsicleto perform compression and format conversion on local files. - [PROMPT_INJECTION]: The skill processes external media files (images and videos) from the user's project directories. This represents a potential surface for indirect prompt injection if those files contain embedded instructions in metadata or SVG content; however, this is a theoretical risk common to all media utilities and is considered safe in this context.
Audit Metadata