generate-cover
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires running shell commands to install dependencies (
npm install) and execute the generation script (node index.js).- [EXTERNAL_DOWNLOADS]: Standard Node.js packages (puppeteer,commander) are fetched from the NPM registry. The HTML template also references external assets from Google Fonts to provide high-quality typography.- [DYNAMIC_EXECUTION]: Uses Puppeteer (a headless browser) to render HTML and capture screenshots. The input data is injected into the local template using safe DOM methods (textContent), preventing potential cross-site scripting (XSS) or code execution within the browser context.
Audit Metadata