awwwards
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides scripts (
font.mjs,photos.mjs) designed to fetch necessary design assets from well-known external services. Specifically, it downloads font configurations and binary files from Google Fonts and Fontshare, and retrieves placeholder images and metadata from the Picsum Photos service. These downloads are integral to the skill's primary purpose of generating complete, high-caliber websites. - [COMMAND_EXECUTION]: A suite of utility scripts (
audit.mjs,shoot.mjs,og.mjs,serve.mjs) is included to facilitate a professional development workflow. these scripts perform local site crawling, capture visual snapshots using Playwright, generate metadata assets, and provide a local static server for production testing. - [DYNAMIC_EXECUTION]: The
browser.mjsutility dynamically resolves and imports theplaywrightorplaywright-corelibrary. This is used to support automated browser interactions for the auditing and asset generation scripts, targeting standard Microsoft-maintained testing packages. - [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for prompt-based data ingestion by processing user descriptions into creative concepts and technical site specifications. It also includes an audit script that crawls generated page content to evaluate quality. These mechanisms are standard for the site-building task and include features like stripping script tags before analysis to mitigate risk.
Audit Metadata