审计历史

AI review did not confirm the static critical heuristic as malicious. Most backtick, weak-crypto, and hidden-file alerts are false positives from markdown fences, template literals, URLs, and the ~/.claude installation path. The real risk is medium because the skill runs a local Node script that downloads icons, reads SVG/config files, writes PNG files, and updates manifest.json paths.

This skill is a legitimate icon generation tool for Chrome extensions. All detected patterns are false positives: documentation examples trigger command pattern detection, network requests are to the documented Iconify API, and filesystem operations are standard file writes to user-specified directories. No credential access, exfiltration, or malicious behavior present.

This skill is a legitimate icon generation tool for Chrome extensions. All detected patterns are false positives: documentation examples trigger command pattern detection, network requests are to the documented Iconify API, and filesystem operations are standard file writes to user-specified directories. No credential access, exfiltration, or malicious behavior present.

This skill is a legitimate icon generation tool for Chrome extensions. It makes documented HTTPS requests to the Iconify API to search and download icons, converts SVG to PNG using the Sharp library, and updates manifest.json. All operations are confined to user-specified directories with no exfiltration or persistence mechanisms.

This skill is a legitimate icon generation tool for Chrome extensions. It makes documented HTTPS requests to the Iconify API to search and download icons, converts SVG to PNG using the Sharp library, and updates manifest.json. All operations are confined to user-specified directories with no exfiltration or persistence mechanisms.

This skill is a legitimate icon generation tool for Chrome extensions. It makes documented HTTPS requests to the Iconify API to search and download icons, converts SVG to PNG using the Sharp library, and updates manifest.json. All operations are confined to user-specified directories with no exfiltration or persistence mechanisms.