creating-views
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/preview.mjsscript executes a command-line tool namedagent-browserto render and screenshot HTML views. This is an intended function for the preview feature of the visualization kit. - [DATA_EXPOSURE]: The
scripts/preview.mjsscript reads the content of a file specified via command-line arguments to generate the preview. While intended for HTML views, this capability allows reading other local files if the script is invoked on unintended paths.
Audit Metadata