Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Jul 30, 2026
Independent checks from skills.sh's audit partners.
This skill provides tools for extracting static HTML from web applications and React components. It uses Puppeteer for full-page snapshots and custom TypeScript scripts for JSX conversion and post-processing. Key security features include SSRF protection for outbound resource fetching and atomic file operations to prevent race conditions. The 'MEDIUM' verdict is assigned because the snapshot utility allows dynamic loading and execution of local authentication scripts, a feature intended for handling login walls but requiring careful use of the execution environment.
Detected behaviors
No alerts
1 issue