live-panel
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external system binaries including Chrome/Chromium and FFmpeg using the
subprocessmodule to handle video rendering and frame extraction tasks. - Evidence:
scripts/render.pyandscripts/check_frames.pyinvokeffmpegvia CLI arguments to process generated video files. - Evidence:
scripts/livepanel.pylaunches Chrome using the--remote-debugging-pipeflag to enable headless automation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON configuration files which could theoretically contain malicious instructions designed to influence the agent's interpretation of the system topology.
- Ingestion points:
scripts/render.pyandscripts/check_frames.pyingest local JSON data via the--configargument. - Boundary markers:
SKILL.mdexplicitly warns the agent to treat topology as data and not instructions, and the HTML template implements a restrictive CSP to prevent external resource loading. - Capability inventory: The skill has local file system access and the ability to trigger subprocesses.
- Sanitization: The renderer (
assets/template.html) escapes text content before rendering to mitigate HTML injection risks. - [DYNAMIC_EXECUTION]: The skill utilizes the Chrome DevTools Protocol to execute dynamic JavaScript within a headless browser to manage the rendering lifecycle and perform layout validation.
- Evidence:
scripts/livepanel.pyimplements aChrome.eval()method that interfaces with the page context viaRuntime.evaluatecalls. - Evidence:
scripts/check_frames.pyconstructs JavaScript strings to perform pixel-level comparisons of captured PNG frames within the browser's canvas environment.
Audit Metadata