type-specimen
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate design utility for creating type specimens. It functions by writing configuration and HTML files to the local filesystem and serving them via a local loopback server.
- [EXTERNAL_DOWNLOADS]: The skill references font assets from Google Fonts (fonts.googleapis.com). This is a well-known service and the reference is required for the skill's primary purpose of displaying typefaces.
- [COMMAND_EXECUTION]: The skill uses Python's standard library to host a local HTTP server and the
webbrowsermodule to open the specimen page. These operations are restricted to the local environment and are initiated by direct user commands. - [SAFE]: Static analysis alerts regarding Unicode line separators were identified as part of the skill's sanitization logic. This logic is used to ensure that user-provided text does not cause JavaScript syntax errors when injected into the specimen template.
- [SAFE]: The skill implements appropriate escaping of user content before it is included in the generated HTML to prevent accidental code injection.
Audit Metadata