baoyu-compress-image

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external image processing tools such as sips, cwebp, and ImageMagick's convert. These commands are invoked using child_process.spawn with arguments passed as an array, which is a secure implementation that prevents shell command injection attacks.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the bun runtime and dynamically imports the sharp package if needed. These are standard tools and libraries for image processing within the Node.js/Bun ecosystem.
  • [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms were detected. The file system operations (read, write, rename) are consistent with the skill's stated purpose of optimizing and organizing image files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 03:07 PM