update-screenshots

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes standard developer tools including gh, curl, and git to retrieve CI data and update repository files.
  • External Downloads: It downloads image files from hediet-screenshots.azurewebsites.net for verification purposes. This is a project-specific service used for CI artifacts.
  • Dynamic Execution: A Python script is executed locally to compare downloaded images. This script uses the Pillow library to identify visual regressions.
  • Indirect Prompt Injection: The skill ingests data from external sources such as CI job logs and run manifests. This is a common pattern for CI-integrated tools and is handled using standard parsing commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:33 PM
Security Audit — agent-trust-hub — update-screenshots