report-with-html
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external processes to handle HTML rendering and quality assurance.
scripts/render_report.shinvokes Google Chrome or Chromium in headless mode to capture screenshots of the generated reports.scripts/delivery_gate.pyandscripts/reconcile_content_diff.pyuse thesubprocessmodule to manage rendering tasks and browser lifecycle during verification steps.- [DYNAMIC_EXECUTION]: The skill utilizes runtime code loading and script injection techniques.
scripts/reconcile_content_diff.pyinjects a hardcoded JavaScript payload into HTML files before rendering them in a headless browser to extract human-readable text.scripts/test_reconcile_content_diff.pyusesimportlib.utilto dynamically load the target script for unit testing purposes.- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data, which creates a surface for indirect prompt injection.
- Ingestion points:
scripts/reconcile_content_diff.pyreads HTML files provided via command-line arguments;assets/regen-docs-template.pyingests Markdown files from a user-configured directory. - Boundary markers:
assets/regen-docs-template.pyuses specific HTML comments (<!-- DOCS:BEGIN -->/<!-- DOCS:END -->) to delineate content segments. - Capability inventory: The skill can execute shell commands, manage browser processes, and write to the local file system.
- Sanitization: Basic sanitization using
html.escapeis applied to metadata fields inassets/regen-docs-template.pybefore they are embedded in the final output.
Audit Metadata