hello-demo
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
cpcommand to move a static asset file to the user's output directory. This is a standard and expected operation for providing downloadable or viewable files to the user. - [SAFE]: The delivered HTML asset contains a bookmarklet using the
javascript:protocol. Analysis of the script shows it is a benign demonstration that displays an alert box with the current page title and URL. The code is transparently visible in the HTML source and poses no security risk.
Audit Metadata