local-web-surface
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill facilitates the creation of macOS LaunchAgents (~/Library/LaunchAgents/) to ensure local web services start automatically upon login. This persistence is a documented core feature of the tool and is restricted to the local user's environment.
- [COMMAND_EXECUTION]: Utilizes standard macOS system utilities such as 'launchctl' for service lifecycle management and 'lsof' for auditing network listeners. These commands are used transparently for administrative management of the local services.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process local data (e.g., Markdown files and YAML/JSON data) which represents a potential injection surface. However, it mandates strong security controls and sanitization practices.
- Ingestion points: Reads local data from sources such as 'posts/**/*.md' and 'todos.yaml'.
- Boundary markers: Employs a 'Local Web Surface Contract' that explicitly defines Read, Write, and Publish boundaries to isolate data contexts.
- Capability inventory: Includes capabilities to manage background processes via 'launchctl' and perform atomic file system writes.
- Sanitization: Instructions specifically require the use of 'textContent' for DOM injection and safe sanitizers for any HTML-based content.
Audit Metadata