stitch-downloader
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
download-googleusercontent.shthat executes standard CLI tools includingcurl,sed,shasum, andsips. All shell inputs are quoted and validated as integers where appropriate to prevent command injection. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto download image content from external URLs. This is the intended behavior for fetching screenshots fromgoogleusercontent.comand does not involve the execution of fetched data.
Audit Metadata