instagram-carousel

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the playwright package and its Chromium browser dependencies using pip3 and the playwright install command. These are standard tools for the stated purpose of exporting HTML to images.
  • [COMMAND_EXECUTION]: The skill executes shell commands to detect file formats (file) and runs dynamically generated Python scripts to handle HTML creation and Playwright automation.
  • [DATA_EXFILTRATION]: The skill implements logic to read local file paths provided by the user and encode them as Base64 data URIs for embedding in HTML. This mechanism creates an attack surface where an agent could be tricked into reading and exposing sensitive local files if the input path is not strictly validated to be an image.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 07:25 PM