lite-screenshots
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various local commands to automate the testing and publishing workflow.
- Evidence: Includes execution of
cargo build -p butto prepare local tools,pnpmfor running E2E tests, andgh apifor interacting with GitHub's REST API. - [DYNAMIC_EXECUTION]: The skill involves building and running local executable code.
- Evidence: The instructions guide the agent to compile the
bututility usingcargoand subsequently execute the resulting binary from thetarget/debug/directory. - [DATA_EXFILTRATION]: The skill transmits local visual data to an external platform.
- Evidence: UI screenshots are encoded and uploaded as git blobs to a specific branch on GitHub using the
gh api. This activity is aligned with the skill's documented purpose of reporting UI changes to reviewers. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to verify the availability of external resources.
- Evidence: Uses
curlto check the status of images hosted onraw.githubusercontent.com, which is a well-known service associated with GitHub.
Audit Metadata