competitor-traffic-report
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
fetch-traffic.jsandbuild-report.jsscripts utilize system commands for data retrieval and image processing. - The scripts use
execFileSyncto invokecurlfor fetching data from SimilarWeb and Ahrefs, and to download logos from Brand.dev. - The
magick(ImageMagick) utility is used to process and resize logo files. - The use of
execFileSyncwith argument arrays effectively prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to external services to collect data for competitive analysis.
- It fetches traffic metrics from
data.similarweb.comand search data fromapi.ahrefs.com. - It retrieves brand icons from
api.brand.dev. - These downloads are necessary for the skill's stated purpose and target well-known or specialized services relevant to the industry.
Audit Metadata