svg-design
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local system commands to facilitate the design review process.
- Evidence: Instructions in
SKILL.mdandreferences/editing-workflow.mdtell the agent to open a generated file usingopen preview.html(macOS) orxdg-open preview.html(Linux). - Context: These commands are used to provide the user with a visual preview of SVG variants created by the agent.
- [EXTERNAL_DOWNLOADS]: Reference materials recommend the use of external tools for SVG optimization.
- Evidence:
references/optimization.mdsuggests installing thesvgoutility vianpm install -g svgo. - Context:
svgois an industry-standard open-source tool for optimizing vector graphics. - [SAFE]: The skill generates an HTML template containing JavaScript for local interaction.
- Evidence:
references/editing-workflow.mdprovides a template forpreview.htmlwith scripts for image comparison and a 3-second polling loop for cache-busting. - Context: The script logic is confined to local DOM manipulation and uses standard browser APIs (
setInterval,querySelectorAll,Date.now) for legitimate workflow improvements.
Audit Metadata