screenshot-url

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is built using the Python standard library, requiring no external packages or third-party dependencies.\n- [COMMAND_EXECUTION]: It offers a command-line interface (screenshot.py) for the agent to take screenshots with customizable parameters such as format, viewport size, and wait conditions.\n- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's service domain at https://pagelens.dev to process rendering requests and manage authentication tokens.\n- [SAFE]: API tokens are stored in the user's configuration directory (~/.config/pagewatch/token) with restricted permissions (0600), ensuring credentials are only accessible by the owner.\n- [SAFE]: Although the shared client code includes a markdown extraction utility that could serve as a surface for indirect prompt injection, the primary screenshot functionality returns binary image data, which is inherently safer.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 06:15 PM
Security Audit — agent-trust-hub — screenshot-url