gs-brand-doc

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a shell script scripts/generate_pdf.sh designed to automate the conversion of Markdown to PDF using command-line utilities.
  • Evidence: The script executes npx -y md-to-pdf with user-supplied input files and specific launch options to ensure compatibility in headless environments.
  • [EXTERNAL_DOWNLOADS]: The skill fetches external resources from well-known and trusted services at runtime.
  • Evidence: scripts/generate_pdf.sh uses npx to download and run the md-to-pdf package from the official NPM registry.
  • Evidence: assets/gs-brand.css imports the 'IBM Plex Mono' font family from Google Fonts via @import.
  • [SAFE]: While the skill instructions recommend disabling the browser sandbox (--no-sandbox) for Linux compatibility, this is a documented configuration for running headless Chrome in restricted environments and is not used here for malicious purposes. The embedded Base64 content in scripts/generate_pdf.sh decodes to a standard SVG image used for branding.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 07:08 AM