screenshot-local
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
shot-scraperand standard shell commands for installation and server management. It documents the use of theserverkey in YAML configurations to start local development processes (e.g.,npm run dev), which is an intended and documented feature of the tool for automated workflows. - [EXTERNAL_DOWNLOADS]: Instructions are provided for installing
shot-scraperfrom official package registries (PyPI) and downloading browser engines (Chromium, Firefox, WebKit) via the tool's native installation routine. - [CREDENTIALS_UNSAFE]: The skill addresses authentication by referencing local context files (
auth.json) created via interactive browser sessions, a standard practice that avoids hardcoding secrets or insecure storage.
Audit Metadata