ljg-card
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Node.js script (
assets/capture.js) to automate the rendering of HTML templates into PNG images via the Playwright library, which is the core functionality for generating visual cards. - [EXTERNAL_DOWNLOADS]: The skill's HTML templates reference external font assets from Google Fonts (
fonts.googleapis.com) to ensure high-quality typography. Installation instructions also mention usingnpmandnpxfor environment setup. - [SAFE]: No malicious patterns, unauthorized data exfiltration, or credential risks were identified. The skill's architecture and script logic are consistent with its primary objective of creating stylistic visual summaries.
Audit Metadata