nuxt-visual-development

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill initiates a local development server using bun run dev and captures screenshots using npx playwright screenshot. These are standard commands for frontend development and visual regression testing.
  • [EXTERNAL_DOWNLOADS]: The use of npx playwright may result in the download of the Playwright library and browser binaries from official package registries. This is expected behavior for this tool.
  • [DATA_EXFILTRATION]: The workflow saves screenshots of the local application to the /tmp directory for analysis by the agent. No network activity targeting untrusted external domains was identified; all operations are centered on localhost:3000.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it captures and 'reads' screenshots of a locally-hosted web application which could contain instructions.
  • Ingestion points: Local web content at localhost:3000 via Playwright screenshots in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Command execution via bun and npx in SKILL.md.
  • Sanitization: No content sanitization is applied to the visual data before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 01:42 AM