annotate-screenshots
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
uploadscommand-line tool to perform core operations, including capturing live web pages and applying visual annotations (boxes, arrows, labels, and redactions) to images. - [EXTERNAL_DOWNLOADS]: The
uploads screenshotcommand fetches content from remote URLs provided by the user to generate screenshots. - [DATA_EXFILTRATION]: The skill documentation explicitly warns that objects uploaded to
uploads.share public. It provides aredactannotation type with asolidstyle specifically to mitigate the risk of exposing secrets like API keys or tokens in shared screenshots.
Audit Metadata