download-webpage-as-pdf
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple command-line utilities to perform its core functionality, including
agent-browserfor web automation, and standard PDF tools likeqpdf,gs(Ghostscript), andpdfinfofor post-processing and optimization. - [COMMAND_EXECUTION]: Employs the
agent-browser evalcommand to execute a complex, asynchronous JavaScript block within the browser context. This script performs DOM manipulation to bypass lazy-loading (strippingloadingattributes and resolvingdataset.src) and automates page scrolling to ensure visual elements are rendered before capture. - [EXTERNAL_DOWNLOADS]: Recommends the use of
npx percollateas an alternative for reader-mode output. This involves downloading and executing a package from the well-known npm registry at runtime. - [PROMPT_INJECTION]: The skill processes untrusted content from external URLs, which represents a surface for indirect prompt injection.
- Ingestion points:
agent-browser open <URL>inSKILL.md. - Boundary markers: Absent; the external content is rendered directly by the browser and processed by subsequent CLI tools.
- Capability inventory: Shell command execution (
gs,qpdf,pdfinfo), file system writing (/tmp/page.pdf), and browser-side JavaScript execution. - Sanitization: None; the skill relies on the standard security boundaries of the headless browser environment.
Audit Metadata