html-report

This skill largely looks like a design-and-template-driven HTML report generator, but there are a few mismatches you should resolve before enabling it for sensitive use: - Verify runtime requirements: SKILL.md expects Chrome (Puppeteer) and Node scripts (screenshot_batch.js, present_files). Make sure those binaries/tools exist and are safe to run in your environment — the skill's manifest does not declare or install them. - Confirm network behavior: the references mention running a "WebSearch" when a requested diagram is not in the library. Ask the maintainer (or inspect the agent's runtime bindings) what endpoint/service the agent will call and whether report content (potentially sensitive) will be sent externally. - Check file outputs and permissions: the workflow writes HTML to /mnt/user-data/outputs — ensure that path is acceptable, and that generated files won't leak sensitive data or be exposed unintentionally. - User consent: the skill's instructions say to "immediately generate without confirmation" on trigger phrases. Decide if that automatic behavior is acceptable or if you prefer a confirmation step before generation. If you plan to use this skill, test it first with non-sensitive sample input to confirm where files are written, what external network calls are made, and that the expected Node/Chrome tooling works. If you cannot verify those aspects, treat the skill as untrusted.