web-scanning
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxto run command-line tools for web auditing. It uses Chrome with the--no-sandboxflag, which is standard for headless operations in restricted environments. - [EXTERNAL_DOWNLOADS]: Uses
npxto fetch and execute reputable Node.js packages like@axe-core/cliandplaywrightfrom the npm registry. - [PROMPT_INJECTION]: The skill processes external web content, which is a surface for indirect prompt injection.
- Ingestion points: Data enters via
curland scanning tools. - Boundary markers: None provided.
- Capability inventory: Command execution and file writing.
- Sanitization: No explicit sanitization of external data is defined.
Audit Metadata