Skills
Navigate
skills/lightpanda-io/agent-skill/lightpanda/Gen Agent Trust Hub

lightpanda

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads a browser binary from the official Lightpanda GitHub repository. The download process includes SHA-256 checksum verification via the GitHub API to ensure file integrity.
  • Evidence: scripts/install.sh fetches assets from https://github.com/lightpanda-io/browser/releases/download/nightly/ and validates them against https://api.github.com/repos/lightpanda-io/browser/releases/tags/nightly.
  • [COMMAND_EXECUTION]: The skill executes shell commands to install the binary and provides an MCP server interface that runs the lightpanda command.
  • Evidence: SKILL.md defines allowed-tools for running the install script and the lightpanda binary. scripts/install.sh uses chmod a+x to make the downloaded binary executable.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 06:36 PM