colorpedia

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 18, 2026, 12:39 AM
• Findings: 0
• Version: 0.1.0

Overview

The skill is internally coherent: it only provides a small bundled shell script that prints brand/feature text and JSON, and it does not request credentials, install software, or perform network/file exfiltration.

This skill is low-risk: it just runs a small included shell script that prints static information and JSON. Before installing, note the minor metadata inconsistencies (license string differs between files and the registry metadata lacks a homepage). If you later see an updated version that adds network calls, reads files, or requests environment variables/credentials, review those changes before enabling the skill. Otherwise there is no credential or file-exfiltration risk in the current package.