html-lint-runner

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The package.json file includes a postinstall script that executes npx playwright install chromium, which downloads the necessary browser binaries from Playwright's official distribution channels for automated testing.
  • [COMMAND_EXECUTION]: The skill includes a shell wrapper script scripts/lint-html.sh and documentation in SKILL.md that utilize standard package management commands (npm install, pnpm install) and build scripts to set up the execution environment.
  • [SAFE]: The core functionality relies on well-known and trusted open-source libraries, specifically @axe-core/playwright and markuplint, to perform static and accessibility analysis on local files without evidence of external data transmission or obfuscated logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 02:32 AM
Security Audit — agent-trust-hub — html-lint-runner