baoyu-compress-image
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external image processing tools such as
sips,cwebp, and ImageMagick'sconvert. These commands are invoked usingchild_process.spawnwith arguments passed as an array, which is a secure implementation that prevents shell command injection attacks. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
bunruntime and dynamically imports thesharppackage if needed. These are standard tools and libraries for image processing within the Node.js/Bun ecosystem. - [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms were detected. The file system operations (read, write, rename) are consistent with the skill's stated purpose of optimizing and organizing image files.
Audit Metadata