Security risk report for @forgecat/mango_skills_agent-skills-media v0.1.1
Source Integrity
Low
Profile is attributed to a known author (Meng To) with a public GitHub repository link and commit hash, enabling verification.
No obfuscated, typosquatted, or attacker-controlled dependencies are introduced; all references are to legitimate public services (aura.build, unsplash.com).
Agent Intent
Low
Content is purely instructional for retrieving and formatting media assets; no prompt injection, role hijack, or system prompt leakage attempts.
No instructions to read credentials, exfiltrate data, install remote payloads, or hide/deny the profile's own instructions.
Guidance is legitimate and security-neutral: recommends well-known public image services (Unsplash, Aura Assets) and standard image cropping/resizing practices.
Details
Evidence
Profile describes two skills: 'aura-asset-images' and 'unsplash-asset-images', both focused on retrieving and formatting public image URLs.
SKILL.md files contain only practical guidance on image search, URL formats, aspect ratios, and export sizes—no malicious instructions.
Example: 'For faces, keep eyes ~1/3 from the top; avoid cutting chin/forehead' is standard design guidance, not manipulation.
Permissions
Low
No tools or MCP servers are declared in the profile; the skills are purely informational guides for using public web services.
Authority is minimal and aligned with stated function: the agent is instructed only to search public image libraries and return URLs and formatting advice.
Details
Evidence
Profile header states 'Dependencies: None required to install this profile.'
Skills reference only public URLs (https://www.aura.build/assets, https://unsplash.com) with no file system, shell, or network mutation permissions requested.
MCP Risk
Low
No MCP servers are defined in the profile; the skills operate entirely through public web URLs and informational guidance.
No hidden instructions, arbitrary binary execution, or unrestricted network/filesystem access is introduced.
Details
Evidence
Profile section 'MCP servers (untrusted data)' is empty: '(none)'.
All references are to public, well-known services with no custom server definitions or tool configurations.
ForgeCat