html-cut
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill facilitates access to the local filesystem through the support of
file:///URLs in thescripts/capture.pyscript andSKILL.mddocumentation. - This capability allows the underlying Playwright browser to render and screenshot any local file accessible to the user, such as configuration files, SSH keys, or environment variables.
- While the script does not contain code to transmit data over the network, the generated images of sensitive local files could be used to exfiltrate information if the agent is manipulated into moving the file or providing its contents.
- [COMMAND_EXECUTION]: The skill executes a Python script that manages a sub-process (Chromium) to perform rendering and screenshot tasks.
- The
output.parent.mkdir(parents=True, exist_ok=True)call inscripts/capture.pyallows the script to create arbitrary directory structures on the filesystem based on the provided output path. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
playwrightlibrary and thechromiumbrowser engine. The documentation provides standard commands for fetching these from official registries and the Playwright project.
Audit Metadata