CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

30.8 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 88 · 1 finding

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · CHANGELOG.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptCHANGELOG.md· markdown

133- **Four new skills (→ 12 total).** Long-tail gaps the asset-type skills don't cover. No MCP

… (102 chars elided on L133)

134- `svg-authoring` — engaged whenever `asset_generate_*` returns an `InlineSvgPlan`. Enforces

… (106 chars elided on L134)

135- `t2i-prompt-dialect` — engaged during prompt rewriting. Per-model rules for `gpt-image-1`,

… (106 chars elided on L135)

136- `asset-validation-debug` — engaged when `asset_validate` or a generator returns warnings.

… (106 chars elided on L136)

137- `brand-consistency` — engaged for multi-asset sets. Builds `BrandBundle` (palette, typogra

… (106 chars elided on L137)

Occurrences

1 occurrence · at L135

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha256183eb789192b5159…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

plugins/prompt-to-asset/skills/logo/SKILL.md · 1 file

plugins/prompt-to-asset/skills/logo/SKILL.md3.6 KB · Markdown

name: logo

description: Generate a production-grade logo (primary brand mark). Returns RGBA PNG master + SVG vector + monochrome variant. Route by text-length and per-model ceiling. Strong-text models render multi-word and even paragraph-length wordmarks reliably; weak-text models composite SVG type post-render.

trigger_phrases: [generate a logo, make a logo, design a logo, brand mark, logo for my app]

Logo generation

Spec

Master: 1024×1024 RGBA PNG, transparent background, subject centered in 80% safe zone
Vector: SVG, ≤200 paths, fixed viewBox, SVGO optimized
Monochrome: 1-color mono variant (auto-derived via luminance threshold or separate generation)
Wordmark routing — model-specific, not blanket:
Paragraph-length OK: gpt-image-2, gemini-3-pro-image-preview (Nano Banana Pro), gpt-image-1.5. Include the wordmark in the prompt; composite stays safer for pixel-exact UI copy.
3–10 words reliable: ideogram-3 / ideogram-3-turbo, gemini-3.1-flash-image-preview (Nano Banana 2), gpt-image-1, flux-2 family.
≤3 words / ≤25 chars: Imagen 4 family, Recraft V4.
Composite always: Flux 1.x, Flux Schnell, SDXL, SD 1.5, Mystic, Pollinations, original Nano Banana 1.

Routing by intent

text in mark?	vector needed?	primary	fallback
none	yes	Recraft V4 (native SVG)	`gpt-image-1.5` → BiRefNet → vtracer
none	no	`gpt-image-1.5` (`background:"transparent"`)	Ideogram 3 Turbo (dedicated `/v1/ideogram-v3/generate-transparent` endpoint, `rendering_speed:"TURBO"`)
1–3 words	yes	Ideogram 3 → raster 1024 → BiRefNet → K-means(6) → vtracer → SVGO	Recraft V4
1–3 words	no	Ideogram 3	`gpt-image-1.5`
4–10 words	yes	`flux-2` / `gpt-image-2` → raster 1024 → BiRefNet → K-means(6) → vtracer → SVGO	Nano Banana Pro
4–10 words	no	`flux-2` family or `gpt-image-2` (note: gpt-image-2 has no native RGBA — matte after)	Nano Banana Pro
paragraph	any	Nano Banana Pro or `gpt-image-2`; composite is still safer for pixel-exact UI copy	composite via `BrandBundle.typography`

Dialect-ready prompt scaffold

A [flat vector | isometric | brutalist | soft gradient] logo mark representing [SUBJECT, concrete noun phrase].
Centered composition. Clean silhouette, strong tight outline, high contrast.
Palette: [#hex, #hex, #hex] strictly.
["WORDMARK TEXT" in sans-serif, tight tracking | text-free mark].
Solid pure white background. Square 1:1 aspect. 1024x1024.

For SD: prepend masterpiece, vector logo, flat design, minimalist, 8k, . For Flux: drop all quality modifiers; be concrete about subject and palette.

Post-process

BiRefNet matte (or Recraft SVG → rasterize at 1024).
Checkerboard-pattern probe: reject if failed.
If SVG needed: K-means 6-color → vtracer --mode polygon → SVGO (conservative preset).
Monochrome variant: greyscale → Otsu threshold → tint brand black.
Validate: tight-bbox ≤ 80% safe zone, palette ΔE2000 ≤ 10, OCR matches wordmark if present.

Failure → action

Checkerboard → route to gpt-image-1 (different provider).
Wordmark garbled → regenerate mark text-free, composite SVG type.
Palette drift → Recraft controls.colors or recolor post.
>200 SVG paths → regenerate with "simpler geometry" or raise K-means color count.

Output

logo/
├── master.png        # 1024² RGBA
├── mark.svg          # vector
├── mark-mono.svg     # monochrome
├── mark-inverse.png  # dark-mode variant
└── meta.json         # provenance + validations

logo-e7bd99— agent skill

Is logo-e7bd99 safe to install?

Logo generation

Spec

Routing by intent

Dialect-ready prompt scaffold

Post-process

Failure → action

Output

Audit the pieces. Scan the whole. Decide.