webpage-screenshot-api

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Python scripts locally to interface with its API. It uses the argparse module to safely parse user-provided arguments like URLs and file paths, which mitigates common command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the service provider's infrastructure at https://pagelens.dev. This is the intended functional behavior of the skill and does not involve downloading or executing unverified third-party scripts or packages.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices for credential management. It generates API tokens dynamically and saves them to a local configuration file (~/.config/pagewatch/token) with restricted 0600 permissions, ensuring the tokens are only readable by the current user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 03:50 PM
Security Audit — agent-trust-hub — webpage-screenshot-api