stitched-full-page-capture
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The
stitch_full_page_capture.mjsscript executes system binariesffmpegandsipsusingspawnandexecFileto handle image cropping and stitching. This process execution is a core part of the skill's utility. - [DYNAMIC_EXECUTION]: The script uses
createRequireto load theplaywrightdependency from the local workspace'snode_modulesat runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes a
manifest.jsonfile containing external URLs and file paths. Ingestion points:manifest.jsonvia CLI argument institch_full_page_capture.mjs. Boundary markers: None. Capability inventory:spawn(ffmpeg),execFile(sips), Playwright browser control, andfsfile operations. Sanitization: Basic string replacement for filenames, but manifest-provided paths are used for file system operations.
Audit Metadata