match-page

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute several command-line utilities including magick and identify (from ImageMagick) for image manipulation and metadata extraction. These tools are used to crop screenshots and verify layout dimensions.
  • [COMMAND_EXECUTION]: The skill runs a local script using the command npx tsx scripts/_shot.ts. This script is part of the skill's infrastructure and is used to capture high-fidelity screenshots of the built site for comparison.
  • [COMMAND_EXECUTION]: The skill utilizes mcp__plugin_playwright_playwright__browser_evaluate to execute JavaScript within a browser environment. This is a standard method for retrieving DOM element positions and dimensions to calculate layout boundaries.
  • [COMMAND_EXECUTION]: The skill interacts with the WordPress site using studio wp post update to apply layout fixes. This is a legitimate use of site management tools within the specified development context.
  • [SAFE]: The skill processes local data from outputDir/parity-log.json and outputDir/sections/<slug>.json. These files store comparison results and intent logs, which are used to maintain state across different phases of the design matching process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 09:44 PM
Security Audit — agent-trust-hub — match-page