lesson-screen
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
lesson-screen.mjsscript utilizesnode:child_process.spawnto manage its background web server and to invoke a local web browser (Chrome, Chromium, or Edge) for generating screenshots of learning materials via theshotcommand. - [EXTERNAL_DOWNLOADS]: The skill fetches visualization configuration and supplementary components from the author's GitHub repository and the project's official website (
aieng-zh.cn). It also loads legitimate libraries such as Mermaid.js and Three.js fromcdn.jsdelivr.netfor browser-based rendering. - [DYNAMIC_EXECUTION]: The screenshot functionality involves rendering HTML and executing JavaScript within a headless browser instance. This behavior is confined to the specific purpose of capturing visual representations of the course content.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a feedback loop where interactions within the browser (such as clicking quiz options or exploring diagrams) are sent back to the agent as text events. This ingestion of external data is documented and intended for interactive teaching, though it represents a surface for indirect instructions.
- Ingestion points: Reads
docs/zh.mdandquiz.jsonfrom the current workspace or remote repository; receives events from the browser via the/eventendpoint. - Boundary markers: None identified for individual event strings.
- Capability inventory: File system writes (screens), subprocess spawning (browser automation), and network requests (fetching course data).
- Sanitization: Uses standard HTML escaping for titles and JSON strings in templates.
Audit Metadata