update-screenshots
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes standard developer tools including
gh,curl, andgitto retrieve CI data and update repository files. - External Downloads: It downloads image files from
hediet-screenshots.azurewebsites.netfor verification purposes. This is a project-specific service used for CI artifacts. - Dynamic Execution: A Python script is executed locally to compare downloaded images. This script uses the
Pillowlibrary to identify visual regressions. - Indirect Prompt Injection: The skill ingests data from external sources such as CI job logs and run manifests. This is a common pattern for CI-integrated tools and is handled using standard parsing commands.
Audit Metadata