snapdom
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches its core library and demo dependencies from
unpkg.com, a well-known and standard CDN for NPM packages. https://unpkg.com/@zumer/snapdom/dist/snapdom.js(UMD version)https://unpkg.com/@zumer/snapdom/dist/snapdom.mjs(ESM version)- [COMMAND_EXECUTION]: The skill documents standard installation commands using
npm i @zumer/snapdomandnpm install @zumer/snapdom-plugins. These are routine developer operations for the vendor's own packages. - [DATA_EXFILTRATION]: The skill includes a
useProxyoption for handling CORS cross-origin images. While this involves sending requests to an external proxy (e.g.,https://proxy.corsfix.com/?), this is a documented and standard practice for DOM-to-Canvas operations involving third-party assets to avoid 'tainted canvas' errors. No sensitive local data access was found. - [PROMPT_INJECTION]: No instructions were found that attempt to override AI safety guidelines or bypass agent constraints.
Audit Metadata