site-check
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check.pyutilizes the Playwright library to spawn and control headless browser processes (Chromium and WebKit). This execution is central to the skill's primary function of rendering and inspecting web pages. - [EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of standard, well-known libraries
playwrightandpillowvia the official Python package registry. Additionally, it requires downloading browser binaries from Playwright's official distribution channels. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external URLs, which represents a potential attack surface if those pages contain malicious instructions intended for the agent.
- Ingestion points: The target website's content is ingested via
page.goto()withinscripts/check.py. - Boundary markers: The skill relies on standard browser sandboxing; there are no specific markers to delineate untrusted page content within the automation logs or reports.
- Capability inventory: The script can execute JavaScript on the page (
page.evaluate), capture screenshots, and write performance reports to the local filesystem (report.json). - Sanitization: The skill does not perform content sanitization or filtering on the target website's text before including it in the report or console output.
Audit Metadata