paw-cra-designer
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill integrates with the fal.ai platform to generate AI images. This involves sending structured prompts to a well-known external service, which is a core and legitimate function of the designer skill.\n- [COMMAND_EXECUTION]: The skill utilizes local CLI utilities such as ffmpeg for animated asset processing and loopwind for template-based design. These operations are restricted to the local environment and are standard requirements for design automation.\n- [DATA_EXFILTRATION]: Visual asset generation involves transmitting textual prompts and metadata to external AI models (fal.ai). This data flow is necessary for the skill's operation and targets recognized professional service endpoints.\n- [DYNAMIC_EXECUTION]: The template system implements a hybrid workflow that generates images by rendering HTML/CSS templates via Puppeteer. While this involves dynamic content construction, the execution is confined to a local headless browser for the purpose of asset export.\n- [SAFE]: No malicious prompt injection, obfuscation, or unauthorized data exfiltration patterns were detected. The skill follows best practices for secret management by loading API keys from local configuration files.
Audit Metadata