HTML
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local script
Tools/Render.tsto process structured JSON data into HTML files. All CSS and fonts are embedded locally as data URIs, ensuring compliance with strict Content Security Policies (CSP) by avoiding external network requests. - [COMMAND_EXECUTION]: The skill uses local shell commands for voice notifications (
curltolocalhost) and running the renderer viabun. These are internal to the system's workflow and do not involve untrusted remote sources. - [EXTERNAL_DOWNLOADS]: No external downloads or remote scripts were identified. The renderer uses local system fonts or files explicitly expected to be in standard local paths (e.g.,
~/Library/Fonts).
Audit Metadata