stitched-full-page-capture

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The stitch_full_page_capture.mjs script spawns external system processes for ffmpeg and sips. These processes are used to manipulate and validate images based on parameters provided in a manifest file.\n- [DYNAMIC_EXECUTION]: The script uses createRequire to dynamically import the playwright library from the project's root package.json at runtime, which allows it to adapt to the local environment's dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from a manifest.json file which directs the agent's actions.\n
  • Ingestion points: Fields such as pageUrl, fullPageImage, and sectionImages within the provided manifest.json file.\n
  • Boundary markers: None identified; the script trusts the manifest structure and content.\n
  • Capability inventory: Includes filesystem read/write access via node:fs/promises, execution of shell commands through spawn and execFile, and network/browser control via Playwright.\n
  • Sanitization: The script performs minimal sanitization on filenames generated from item titles but lacks robust validation against path traversal for output file paths defined in the manifest.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 04:38 PM