netresearch-branding
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates a mechanical linting system in
checkpoints.yamlthat executes standard shell utilities includinggrep,jq,awk,find,head, andtail. These commands are used to validate branding markers, license mentions, and configuration accuracy inREADME.md,composer.json, andext_emconf.phpfiles. - [DYNAMIC_EXECUTION]: The
scripts/contrast-audit.cjsutility utilizes a headless Chromium browser via the Playwright library. It performs dynamic execution of JavaScript inside the browser context usingpage.evaluateand Chrome DevTools Protocol (CDP) commands to measure rendered element contrast and accessibility landmarks. - [EXTERNAL_DOWNLOADS]: The audit script depends on the
playwright-corepackage. In typical environments, this package may trigger the download of the Chromium browser binary required for the auditing process. The script includes robust security checks, such as origin-validation logic to preventAuthorizationheaders from leaking to third-party domains during redirects or subresource fetches.
Audit Metadata