add-favicon
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes ripgrep (rg) to scan the local project directory for configuration files like package.json and VitePress/VuePress configs. This is a standard file discovery operation for developer tools and does not target sensitive system files.\n- [SAFE]: The instructions for using curl are strictly for verifying the presence of the favicon on the target website after deployment. No evidence of unauthorized network access or data exfiltration was found.\n- [SAFE]: The skill generates local SVG files and modifies configuration files to include icon metadata. These operations are transparent, local-only, and within the scope of the skill's functional purpose.\n- [SAFE]: No patterns of prompt injection, obfuscation, privilege escalation, or remote code execution from untrusted sources were detected in the instructions or metadata.
Audit Metadata