skills/mtgvim/tiger-kit/tk-writing/Gen Agent Trust Hub

tk-writing

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous Python and JavaScript scripts for the agent to use, including build_html.py, add_feedback_studio.py, and package_html.py. These tools are used for document assembly and post-processing.
  • [DYNAMIC_EXECUTION]: The scripts capture_page.mjs and svg_to_png.mjs utilize the Playwright library to render HTML and SVG content. The implementation in chrome_capture.mjs includes a robust sandbox configuration that blocks all external network requests, prevents WebSocket connections, and restricts navigation to safe local schemes (file, data, about, blob).
  • [EXTERNAL_DOWNLOADS]: The skill relies on external components such as the Playwright SDK and the Chrome browser. The scripts are configured to use existing local installations and include checks to ensure no unauthorized software installation or remote downloads are attempted during runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 12:52 AM