screen-demo-production
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a set of instructional guidelines and best practices for screen demonstration production. It contains no executable code, scripts, or malicious commands.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and technical standards from well-known organizations including Playwright (Microsoft), W3C, Mozilla, Apple, and NIST. These references are used for educational purposes and do not involve remote code execution or untrusted downloads.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines workflows for browser automation which involves ingesting external web content. It identifies this attack surface and provides detailed mitigation instructions. Ingestion points: Browser automation tools (Playwright) interacting with external web applications. Boundary markers: The skill mandates defining a 'do-not-show' list and using shot ledgers to manage content. Capability inventory: Describes the use of browser automation for UI capture and interaction. Sanitization: Instructions explicitly require scrubbing secrets, API keys, tokens, and personal data from video, audio, network traces, and log artifacts.
Audit Metadata