share-import
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
playwright(via Chromium) to render Gemini share pages, which are client-side rendered. This involves launching a headless browser to extract the DOM content. This is a standard approach for modern web scraping of public share URLs. - [EXTERNAL_DOWNLOADS]: The skill fetches data from
chatgpt.comandgemini.google.comshare endpoints to retrieve conversation content. These are the primary functions of the skill and target well-known, expected services. - [NO_CODE]: The scripts provided (
pull_chatgpt_share.tsandpull_gemini_share.ts) are localized to the skill's directory and perform data retrieval and file writing as described in the metadata. No arbitrary command execution, privilege escalation, or persistence mechanisms were detected.
Audit Metadata