stitched-full-page-capture
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
stitch_full_page_capture.mjsscript spawns external system processes forffmpegandsips. These processes are used to manipulate and validate images based on parameters provided in a manifest file.\n- [DYNAMIC_EXECUTION]: The script usescreateRequireto dynamically import theplaywrightlibrary from the project's rootpackage.jsonat runtime, which allows it to adapt to the local environment's dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from amanifest.jsonfile which directs the agent's actions.\n - Ingestion points: Fields such as
pageUrl,fullPageImage, andsectionImageswithin the providedmanifest.jsonfile.\n - Boundary markers: None identified; the script trusts the manifest structure and content.\n
- Capability inventory: Includes filesystem read/write access via
node:fs/promises, execution of shell commands throughspawnandexecFile, and network/browser control via Playwright.\n - Sanitization: The script performs minimal sanitization on filenames generated from item titles but lacks robust validation against path traversal for output file paths defined in the manifest.
Audit Metadata