screenshot
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to facilitate the screenshot process, including building the target application (
npm run build), starting a local web server using Python'shttp.servermodule, and running a Node.js script to drive the browser. - [EXTERNAL_DOWNLOADS]: If the
playwright-corelibrary is not found in the environment, the skill will attempt to install it from the official NPM registry usingnpm install --no-save playwright-core. - [COMMAND_EXECUTION]: The screenshot script launches the Chromium browser using the
--no-sandboxflag. While this reduces the browser's internal security isolation, it is a standard configuration for running headless browsers in many containerized or restricted environments where user namespaces are unavailable. - [COMMAND_EXECUTION]: The skill uses background processes (
&) to run the local web server. The server is used to host files for rendering before the screenshot is captured.
Audit Metadata