social-media-cover-generator
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses
puppeteerto render local HTML files into images. Thescripts/html2png.jsscript correctly uses absolute paths and verifies the existence of input files before processing. - [EXTERNAL_DOWNLOADS]: The HTML template fetches the
snapdomlibrary fromunpkg.com, which is a well-known CDN for NPM packages. This is a standard practice for web-based rendering and does not introduce security risks in this context. - [COMMAND_EXECUTION]: The skill instructs the agent to run
node scripts/html2png.jsto perform the image conversion. The script logic is focused on the intended purpose and does not include shell injection vectors or unintended command execution. - [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access, or exfiltration patterns were found. The tool operates on user-provided titles and generates local image files.
Audit Metadata