html-to-pdf-regression
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install packages from official and trusted registries, including the npm registry for Playwright and PyPI for WeasyPrint and pytest. Documentation links point to well-known domains such as mozilla.org and playwright.dev.\n- [COMMAND_EXECUTION]: The instructions include commands for package installation and tool execution. It notes the use of the --enable-local-file-access flag for wkhtmltopdf; while functional for rendering local assets, this configuration represents a potential surface for Local File Inclusion (LFI) if applied to untrusted HTML templates.\n- [DATA_EXFILTRATION]: The skill describes reading from and writing to the local filesystem for PDF generation and baseline comparison, which is consistent with its role as a testing utility.
Audit Metadata