ui-screenshots
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the playwright and mss libraries and the Chromium browser binary. These are standard dependencies for web and screen capture tasks and originate from well-known and trusted sources.
- [COMMAND_EXECUTION]: The skill includes Python code that uses ctypes to access Windows User32 API functions like EnumWindows and GetWindowTextW. This is a legitimate technique for locating and capturing specific desktop windows as described in the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data via the URL parameter in the capture function. 1. Ingestion points: url parameter in SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: Launches browser and saves files. 4. Sanitization: No sanitization or validation of the URL content is performed before screenshotting. Risk is low as the agent does not interpret the rendered content.
Audit Metadata