stitch-downloader

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash script download-googleusercontent.sh that executes standard CLI tools including curl, sed, shasum, and sips. All shell inputs are quoted and validated as integers where appropriate to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to download image content from external URLs. This is the intended behavior for fetching screenshots from googleusercontent.com and does not involve the execution of fetched data.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 10:42 AM