element-screenshot
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Node.js process that communicates with a browser instance over the Chrome DevTools Protocol. It takes user-defined CSS selectors and file paths as input to determine what to screenshot and where to save the result.
- [EXTERNAL_DOWNLOADS]: The skill uses the
wspackage, which is a standard library for WebSocket communication, to interface with the browser's debugging port. - [SAFE]: The implementation follows secure coding practices, such as using
JSON.stringifyto escape CSS selectors when constructing JavaScript code for execution in the browser context, effectively preventing script injection into the DevTools session.
Audit Metadata