browsing-styles

Warn

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill performs dynamic loading of modules using import() with file paths resolved at runtime. This is observed in scripts/preview_server.ts and scripts/generate_tiles.ts, where the skill attempts to load local utility modules such as resolve-root.ts and utils.ts. The implementation includes a fallback mechanism that searches through the user's home directory and plugin configuration files to locate these dependencies.
  • [COMMAND_EXECUTION]: The skill executes external shell commands to facilitate its workflow. scripts/preview_server.ts uses Bun.spawn to trigger the system's default browser opener. Additionally, both scripts/preview_server.ts and scripts/generate_tiles.ts use spawnSync to execute a separate image optimization script using bun run.
  • [EXTERNAL_DOWNLOADS]: The skill connects to the Gemini API to generate style reference images as part of its core functionality, specifically within the tile generation and regeneration features.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 08:10 PM