lovstudio-rich-export
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/export_rich.pyusessubprocess.runto invoke system tools likepandocandplaywright. These calls are necessary for the skill's primary function of file conversion and are restricted to specific, hardcoded binaries or user-specified input paths that are resolved to absolute paths before use. - [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use of Playwright for PDF generation, which involves downloading Chromium. This is a well-known service dependency required for the tool's core functionality.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The skill processes local files and exports them to a user-defined output directory.
Audit Metadata