competitor-traffic-report

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The fetch-traffic.js and build-report.js scripts utilize system commands for data retrieval and image processing.
  • The scripts use execFileSync to invoke curl for fetching data from SimilarWeb and Ahrefs, and to download logos from Brand.dev.
  • The magick (ImageMagick) utility is used to process and resize logo files.
  • The use of execFileSync with argument arrays effectively prevents command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to external services to collect data for competitive analysis.
  • It fetches traffic metrics from data.similarweb.com and search data from api.ahrefs.com.
  • It retrieves brand icons from api.brand.dev.
  • These downloads are necessary for the skill's stated purpose and target well-known or specialized services relevant to the industry.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:01 AM