Security audit
Skill Playwright Html Pdf Renderer Migrate2
Security checks across malware telemetry and agentic risk
Overview
This skill gives straightforward instructions for turning HTML into PDFs with local Playwright/Chromium, with no hidden or unrelated behavior found.
Before installing, expect it to add Playwright/Chromium dependencies and to run a local headless browser for PDF generation. Use care with untrusted HTML because rendered pages may reference external assets or local paths depending on how the caller supplies the content.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
