create-site

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • External Script Integration: The skill fetches the axe-core accessibility engine from a public CDN (cdnjs.cloudflare.com) during the verification phase. While fetching scripts from external CDNs is a common practice for including auditing tools, it involves executing code from an external network resource within the browser context.
  • Automated Browser Testing: To ensure compliance with WCAG standards, the skill uses the Playwright framework to programmatically navigate the generated site and execute auditing scripts. This is a standard method for automated quality assurance and is necessary for the skill's accessibility verification goal.
  • Command-Line Automation: The skill performs essential development tasks such as installing project dependencies via npm, initializing Git repositories, and launching local development servers. These operations are foundational to modern web development and are executed within the project's local directory.
  • Input-Driven Content Generation: The skill uses user-provided parameters and web search results to populate site templates and source visual assets from Unsplash. While this processes external data, it is handled through a planned implementation phase that translates user intent into site code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 11:51 PM