card-quote
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Playwright browser automation library and Chromium browser engine via
pip install playwright && playwright install chromiumto function. - [EXTERNAL_DOWNLOADS]: The HTML template fetches CSS and fonts from well-known CDNs, specifically Tailwind CSS (
cdn.tailwindcss.com) and Google Fonts (fonts.googleapis.com), which are standard for web development and considered safe sources. - [COMMAND_EXECUTION]: The skill instructs the agent to execute a Python script (
render_card.py) using shell commands to convert HTML content into PNG images. The parameters (width, height, file paths) are structured and don't involve direct injection of untrusted user strings into the shell beyond the file naming convention. - [DYNAMIC_EXECUTION]: The rendering process involves dynamic generation of HTML files which are then rendered by a headless browser. This is the intended primary purpose of the skill for design automation.
Audit Metadata