Icon
v3.4.1Generate and convert icons. Use when creating SVGs, building sprite sheets, converting ICO/PNG/SVG, or generating favicon sets.
⭐ 0· 319·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (icon generation, conversion, sprites, favicons) matches the included SKILL.md and the bash script which implements generate, sprite, convert, search, resize, and favicon operations. No unrelated services, credentials, or binaries are requested.
Instruction Scope
SKILL.md directs the agent to run the included bash script with explicit arguments. The script only reads user-specified files/directories and writes outputs to user-specified output paths; it does not attempt to read unrelated system configuration, environment secrets, or contact external endpoints.
Install Mechanism
There is no install spec; the skill is instruction + a local shell script. No remote downloads or archive extraction are performed by the skill itself.
Credentials
The skill declares no required environment variables or credentials, and the script does not access external secrets. It does call external image tools if available (ImageMagick 'convert', librsvg 'rsvg-convert'), which is appropriate for image conversion features.
Persistence & Privilege
always is false and the skill does not request permanent or elevated platform privileges or modify other skills' configurations. It operates locally and on files/paths provided by the user.
Assessment
This skill appears to do what it says: a self-contained bash script for creating and converting icons. Before running it, review the script (you already have it), run it on directories you control, and avoid running it as root. The convert path uses external tools (ImageMagick 'convert' or 'rsvg-convert') — ensure those are from trusted packages and be cautious processing untrusted images because past ImageMagick vulnerabilities have allowed code execution. Note the script expects GNU-style utilities (example: grep -oP for PCRE); behavior may vary on some systems. If you need higher assurance, run the script in an isolated environment (container) and verify any third-party binaries it invokes are up-to-date.Like a lobster shell, security has layers — review code before you run it.
latestvk97bv5ytswmeyt4zn8caafcmwd8337xq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.