run-skill-generator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions guide the agent to perform environment setup tasks such as installing dependencies via
apt-get, building projects vianpmorpip, and managing background processes usingxvfbandtmux. These are standard operations for automated application testing and development workflows. - [DYNAMIC_EXECUTION]: The skill is a generator that produces interaction 'drivers' (e.g.,
driver.mjs). These drivers useplaywright-coreto programmatically interact with GUI applications. The templates provided are structured for legitimate automation and include workarounds for common headless environment constraints, such as using/dev/stdinto manage REPL input. - [DATA_EXPOSURE]: While the skill involves taking screenshots of running applications to verify UI state, these artifacts are stored in local temporary directories (
/tmp/shots/) for the user's review and are not exfiltrated to external endpoints. - [PROMPT_INJECTION]: The skill uses
disable-model-invocation: truein its frontmatter, which is a safety feature that prevents the skill from making additional model calls. The instructions are focused on generating technical documentation and scripts rather than overriding agent safety behaviors.
Audit Metadata