ky-design-to-html-skill
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
playwrightPython library and its associated browser binaries. Playwright is a well-known and legitimate browser automation tool used for the skill's primary purpose of visual validation. - [COMMAND_EXECUTION]: The skill provides a utility script,
scripts/screenshot_page.py, which is executed via the command line to render HTML files. This is a core component of the workflow for validating the design conversion. - [DYNAMIC_EXECUTION]: The skill utilizes a headless browser (Chromium) to dynamically render HTML content from local file paths (
file://). This is standard behavior for tools that perform visual regression or screenshot testing. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external UI screenshots and generates/renders HTML code based on them.
- Ingestion points: The skill processes user-provided design images and generated HTML files as its primary input.
- Boundary markers: No explicit delimiters or boundary markers for untrusted input are described in the instructions.
- Capability inventory: Includes the ability to render local files and take screenshots using Playwright in
scripts/screenshot_page.py. - Sanitization: The skill does not mention specific sanitization or filtering logic for the HTML content before it is rendered by the screenshot utility.
Audit Metadata