lovstudio-find-logo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited lovstudio-find-logo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Takes a brand name or URL, probes Clearbit + the site's own og:image / <link rel=icon> / favicon, scores each candidate, and archives the best one plus a couple of alternates into the configured collection directory.
Accept any mix of names and URLs. If the user gave only a name with no obvious domain, ask — don't silently guess .com (script will guess, but for non-US or ambiguous brands that fails).
Use AskUserQuestion when:
xAI → x.ai, not xai.com)python3 scripts/find_logo.py --name "Anthropic" --url https://anthropic.com --jsonFor a batch, loop; the script is idempotent per <slug>/ (re-runs overwrite).
0 → logo archived. The printed score is your quality signal:≥ 60 — solid: SVG or transparent PNG with wide/square aspect20–60 — usable: probably a favicon or small PNG< 20 — weak: only ICO or tiny stub found2 / status: "no-candidates" → script found nothing.Do NOT give up. Use WebSearch for "<brand> logo svg site:*.com" or the brand's press-kit page, then re-invoke with --url <direct-image-url> is not supported — if you have a direct image URL, save it into the configured collection directory under <slug>/logo.<ext> and hand-write meta.json using the existing layout as a template.
Report back with the archive path and the primary's aspect + format. If the score is weak, tell the user and offer to retry with a specific press-kit URL or Wikipedia SVG.
| Argument | Default | Description |
|---|---|---|
--name | — | Brand/product name. Used for slug + meta. |
--url | — | Official URL or bare domain. Overrides the name-based domain guess. |
--slug | slugified name | Override the directory slug under the archive root. |
--out | LOVSTUDIO_FIND_LOGO_OUTPUT_DIR or ~/.lovstudio/logo-collection | Archive root. |
--keep-alts | 2 | How many runner-up candidates to keep as alt-N.<ext>. |
--json | off | Emit a JSON result to stdout (use this when chaining). |
At least one of --name or --url is required.
~/.lovstudio/logo-collection/
├── anthropic/
│ ├── logo.png # primary (highest score)
│ ├── alt-1.png # runner-ups
│ ├── alt-2.png
│ └── meta.json # sources, scores, dimensions, fetched_at
├── vercel/
│ ├── logo.png # 1200x628 transparent banner
│ └── ...
└── stripe/
├── logo.svg
└── ...+30 if alpha channel present (SVG always counts)+25 for wide (≥2:1), +10 for landscape (≥1.3:1),-5 for square, -15 for tall/portrait
+15 if ≥128px, +5 if ≥64px, -20 if <32px-30 if payload <400 bytes (almost certainly a stub)This matches the "prefer 长条形 + rgba" preference — wide transparent logos come out on top, square favicons land as alternates.
Stdlib only (urllib, html.parser, argparse). No pip install required.
Default archive files live under ~/.lovstudio/logo-collection/. Override this per run with --out, or set LOVSTUDIO_FIND_LOGO_OUTPUT_DIR for the skill.
.com suffix. Foranything not on .com, pass --url explicitly.
covers most major brands but not all.
WebSearch fallback is Claude's responsibility, not the script's.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.