create-html-carousel
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill dynamically generates HTML and CSS files based on user-provided content and design templates. These files are then rendered using the Playwright automation library to capture high-quality PNG screenshots for LinkedIn. This is the core intended functionality of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a content generator that ingests user-supplied text to populate slides. While this involves processing external data, the risk is mitigated as the agent maintains control over the HTML structure and the output is rendered in a local environment to produce static images.
- [EXTERNAL_DOWNLOADS]: The skill references typography from well-known services, including Google Fonts and Fontshare, and requires the installation of the Chromium browser engine via Playwright during its initial setup. These are standard practices for web-based content tools.
- [COMMAND_EXECUTION]: The skill uses local Node.js scripts to manage the export process, including directory creation and coordinate the headless browser's screenshot operations.
Audit Metadata