isometric-explainer
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes build scripts (e.g., templates/build.mjs) that utilize Node.js file system modules (node:fs) to read local library files and write the generated HTML output. These operations are restricted to the local development environment and the skill's own directory.
- [REMOTE_CODE_EXECUTION]: Documentation for verification (references/verify.md) suggests using Playwright for browser-based testing. Playwright is a well-known, trusted industry-standard automation framework. No unauthorized or suspicious remote code execution patterns were found.
- [DATA_EXPOSURE]: The skill manages state persistence via URL query parameters, allowing users to share specific machine configurations. This is a standard and safe implementation for client-side interactive visualizations with no observed exfiltration or sensitive data access.
- [DYNAMIC_EXECUTION]: The build process involves inlining local JavaScript files into a generated HTML template. This is a common static site generation pattern used here to create portable, single-file explainer pages.
Audit Metadata