resciencelab/opc-skills logo-creator
Checked the catalogued skill at logo-creator.
A set by no findings on this axis
A set by no findings on this axis
A set by no findings on this axis
No issues flagged by the static checks in the scanned files.
11 suppressed by AI triage
Code reads from a shell profile, not modifying it.
Code reads from a shell profile, not modifying it.
Code reads from a shell profile, not modifying it.
The reference is to a legitimate API endpoint, not malicious.
Script uses curl to call a public API for image processing.
Outbound call is to a legitimate external service.
The code only reads from ~/.zshrc, it does not modify the shell profile.
The comment indicates reading the API key, not altering the profile.
Printing an error message is not a persistence mechanism.
The line only prints a URL; no network traffic occurs.
The curl call is a legitimate API request to a trusted service, not malicious exfiltration.