screenshot-local
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the 'shot-scraper' package via 'pipx' and download necessary browser engines (Chromium, Firefox, or WebKit) through the 'shot-scraper install' command.
- [COMMAND_EXECUTION]: The skill leverages the 'server' configuration key in YAML files, which is a feature of 'shot-scraper' that executes shell commands to start and stop local development servers (e.g., 'npm run dev') automatically during the screenshot process.
- [SAFE]: The execution of JavaScript within the browser context via the '-j' or '--javascript' flags is used to dismiss modals, set form values, or clean up UI elements before capture, which is a standard and documented use of the tool for generating clean documentation artifacts.
Audit Metadata