netresearch-branding

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill incorporates a mechanical linting system in checkpoints.yaml that executes standard shell utilities including grep, jq, awk, find, head, and tail. These commands are used to validate branding markers, license mentions, and configuration accuracy in README.md, composer.json, and ext_emconf.php files.
  • [DYNAMIC_EXECUTION]: The scripts/contrast-audit.cjs utility utilizes a headless Chromium browser via the Playwright library. It performs dynamic execution of JavaScript inside the browser context using page.evaluate and Chrome DevTools Protocol (CDP) commands to measure rendered element contrast and accessibility landmarks.
  • [EXTERNAL_DOWNLOADS]: The audit script depends on the playwright-core package. In typical environments, this package may trigger the download of the Chromium browser binary required for the auditing process. The script includes robust security checks, such as origin-validation logic to prevent Authorization headers from leaking to third-party domains during redirects or subresource fetches.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 11:00 AM