save-as-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes platform-specific tools like
show_pdf_export_dialogandcopy_starter_componentinstead of invoking arbitrary shell commands or remote scripts. These tools operate within the environment's security boundaries. - [SAFE]: The instructions explicitly forbid the use of external JavaScript libraries such as
jsPDForhtml2canvasfor PDF generation, effectively reducing the attack surface by relying on the browser's native print engine. - [SAFE]: File access and write operations are strictly scoped to the existing project directory. The skill creates a temporary print-ready copy by appending a suffix (
-print.html) to the original filename, ensuring that existing design data is not destructively modified or accessed outside of the defined project structure. - [SAFE]: A provenance stamp mechanism is implemented to ensure the integrity of the print copy. The tool checks for matching version tokens between the source and the copy, preventing the export of stale or unauthorized modifications.
Audit Metadata