create-html-carousel
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
playwrightNode.js package and the Chromium browser vianpx playwright install chromium. These are standard requirements for browser automation and are sourced from reputable registries. - [COMMAND_EXECUTION]: The skill executes a local Node.js script (
screenshot-slides.js) to automate the screenshot process. This script launches a headless browser to navigate to locally generated HTML files within the workspace. - [DATA_EXFILTRATION]: No unauthorized data transmission was identified. The generated HTML templates fetch web fonts from well-known and trusted services, specifically Google Fonts and Fontshare.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided content to populate HTML templates. While this creates an ingestion point for untrusted data, the impact is limited to the local rendering of slides for image export. There is no evidence of this surface being used to manipulate agent behavior or access sensitive data.
Audit Metadata