stitch-extract-static-html
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
snapshot.tsutility features an--auth-scriptflag that dynamically imports and executes local JavaScript or TypeScript files. This mechanism is used to perform authentication steps in the browser context but represents a runtime code execution capability. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests and renders external web pages and JSX source code. While the tool mitigates execution risks by stripping
<script>tags from the resulting snapshots, the processed content could contain malicious instructions designed to mislead the agent. - [EXTERNAL_DOWNLOADS]: The scripts download external images and CSS files to inline them into the generated HTML.
extract_inline_html.tsincludes an explicit validation function (isSafeUrl) that blocks requests to private and internal IP ranges, providing protection against Server-Side Request Forgery (SSRF). - [COMMAND_EXECUTION]: The operational workflow requires the agent to execute local scripts using
npx tsx, which involves command-line execution and file system access to read source files and write generated snapshots.
Audit Metadata