gs-brand-doc
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script
scripts/generate_pdf.shdesigned to automate the conversion of Markdown to PDF using command-line utilities. - Evidence: The script executes
npx -y md-to-pdfwith user-supplied input files and specific launch options to ensure compatibility in headless environments. - [EXTERNAL_DOWNLOADS]: The skill fetches external resources from well-known and trusted services at runtime.
- Evidence:
scripts/generate_pdf.shusesnpxto download and run themd-to-pdfpackage from the official NPM registry. - Evidence:
assets/gs-brand.cssimports the 'IBM Plex Mono' font family from Google Fonts via@import. - [SAFE]: While the skill instructions recommend disabling the browser sandbox (
--no-sandbox) for Linux compatibility, this is a documented configuration for running headless Chrome in restricted environments and is not used here for malicious purposes. The embedded Base64 content inscripts/generate_pdf.shdecodes to a standard SVG image used for branding.
Audit Metadata