create-chatgpt-mockup
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: In the
screenshot.jsfile, the skill usesexecSyncto runnpx playwright install chromium. This is a routine operation used to ensure that the necessary browser binaries are available for the Playwright library to function. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the Chromium browser through the official Playwright installation command. This is an expected and safe operation for a tool designed to perform web-based rendering and screenshot capture.
- [DATA_EXFILTRATION]: Analysis of the network and file system operations shows no signs of unauthorized data access or exfiltration. The skill processes input files locally and saves results to a user-defined output directory.
- [PROMPT_INJECTION]: The skill's instructions and markdown parsing logic were reviewed for injection vulnerabilities. All user-supplied text is correctly escaped using an
escapeHTMLfunction before being rendered, preventing cross-site scripting (XSS) or other content-based injections.
Audit Metadata