url-to-code
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Content Processing (Indirect Ingestion): The skill is designed to capture and replicate the structure and assets of user-specified URLs. While this is a core feature, processing untrusted web content is a standard consideration for browser-enabled tools.
- Ingestion points: External data enters the agent context via the
<target-url>during the browser capture phase. - Boundary markers: The skill includes a mandatory warning step (Step 1) requiring the user to acknowledge terms of service.
- Capability inventory: The workflow allows for file writes, shell command execution via
npm, and network previewing throughsites-preview. - Sanitization: Verification steps (Step 10 and 12) require manual inspection of the rendered page and interaction testing to ensure integrity.
- Local Development Command Execution: The skill uses command-line tools to initialize and run the generated prototypes. This is a standard part of a developer workflow.
- Evidence: It utilizes shell commands such as
npm install,npm run dev, andsites-previewto build and serve the project. - Context: These operations are typical for modern web development environments. The process includes verification checks to pass design QA before completion.
- Grounding Material Access: The agent is instructed to use local context such as design systems and tokens to improve cloning accuracy.
- Evidence: Instructions reference
$user-context, codebase paths, and tokens as grounding material. - Context: This behavior is intended to align the generated output with the user's existing codebase and professional design standards.
Audit Metadata