agile-pen
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
@djalmajr/pen-capturepackage from GitHub Packages and installs the Playwright Chromium browser to support visual capture functionality. - Evidence: Found in
SKILL.mdandscripts/pen-capture.mjswrapper instructions. - [COMMAND_EXECUTION]: The skill executes internal automation scripts and the shadcn CLI to manage the design system and project configuration.
- Evidence:
SKILL.mdspecifies runningscripts/ads.mjsandscripts/pen-capture.mjswith Node or Bun, and usingshadcn addfor layout materialization. - [REMOTE_CODE_EXECUTION]: The skill leverages the
shadcnregistry to fetch and install renderable components into a temporary environment. - Evidence:
SKILL.mddocumentation for thematerializecommand, which usesnpx,pnpm dlx, oryarn dlxto run the shadcn CLI.
Audit Metadata