html-to-pdf
Warn
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The
scripts/render.tsscript is vulnerable to path traversal and injection through its command-line arguments. - The
--photo,--logo, and--employeearguments are used in file system operations (resolve,readFileSync) without validation, allowing the inclusion of arbitrary local files in the rendered output. - The
--photoargument is interpolated directly into an HTML<img>tag'ssrcattribute without escaping, creating an injection vector. This could be exploited to execute JavaScript within the Playwright Chromium instance to access local files or environment variables. - The
--logoargument reads the content of a file and injects it into an SVG structure without sanitization, providing another vector for malicious content injection. - [EXTERNAL_DOWNLOADS]: The skill relies on external dependencies and tools including the Playwright browser automation library, the
qrcodemodule, and various web font packages from the NPM registry. It also requires downloading the Chromium browser binary as part of the setup process.
Audit Metadata