github-screenshots
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the vendor's CLI tool using
npm install --global @buildinternet/uploads. This is a standard installation procedure for a vendor-provided utility and targets the official NPM registry. - [DYNAMIC_EXECUTION]: The
uploads screenshotcommand supports--eval <js>and--init-script <file>flags. These are documented as 'escape hatches' to allow interaction with the webpage (such as dismissing banners, clicking elements, or freezing animations) before capturing a screenshot. This involves executing JavaScript within the browser context managed by the tool. - [COMMAND_EXECUTION]: The skill makes extensive use of local shell commands via the GitHub CLI (
gh) and the vendor'suploadsCLI for repository management, file hosting, and PR commenting. It provides clear guidance on when each tool is appropriate based on the task context.
Audit Metadata