lovstudio-rich-export

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/export_rich.py uses subprocess.run to invoke system tools like pandoc and playwright. These calls are necessary for the skill's primary function of file conversion and are restricted to specific, hardcoded binaries or user-specified input paths that are resolved to absolute paths before use.
  • [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use of Playwright for PDF generation, which involves downloading Chromium. This is a well-known service dependency required for the tool's core functionality.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The skill processes local files and exports them to a user-defined output directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 10:17 PM
Security Audit — agent-trust-hub — lovstudio-rich-export