tk-writing
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous Python and JavaScript scripts for the agent to use, including
build_html.py,add_feedback_studio.py, andpackage_html.py. These tools are used for document assembly and post-processing. - [DYNAMIC_EXECUTION]: The scripts
capture_page.mjsandsvg_to_png.mjsutilize the Playwright library to render HTML and SVG content. The implementation inchrome_capture.mjsincludes a robust sandbox configuration that blocks all external network requests, prevents WebSocket connections, and restricts navigation to safe local schemes (file, data, about, blob). - [EXTERNAL_DOWNLOADS]: The skill relies on external components such as the Playwright SDK and the Chrome browser. The scripts are configured to use existing local installations and include checks to ensure no unauthorized software installation or remote downloads are attempted during runtime.
Audit Metadata