Is render-carousels safe to install?

SaferSkills independently audited render-carousels (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/render-carousels/SKILL.md · 1 file

skills/render-carousels/SKILL.md2.0 KB · Markdown

name: render-carousels

description: "Render multi-slide carousels from HTML templates via Playwright. Use when: producing carousel posts."

argument-hint: "[--post <id>] [--all] [--template <type>]"

effort: high

user-invocable: true

/socialforge:render-carousels — Carousel Renderer

Produce multi-slide carousel images from HTML/CSS templates using Playwright headless rendering.

Supported Templates

Template	Slides	Best For
generic-8slide	8	General purpose
comparison-10slide	10	Feature comparisons
case-study-10slide	10	Client success stories
tips-5slide	5	Quick tips
playbook-8slide	8	Step-by-step playbooks
recap-6slide	6	Event/month recaps
data-infographic-6slide	6	Data-driven infographics
quote-card-single	1	Single quote cards

Process

Select template based on post's carousel_type
For each slide:

Inject content (title, body, data points, statistics)
Apply brand colors via CSS variables (--brand-primary, --brand-secondary, etc.)
Apply brand fonts
If slide needs background image: generate or compose via image-compositor

Render each slide via Playwright (headless Chromium → PNG, 1080x1080)
Show first and last slide to user for approval
Compile all slides into PDF (for LinkedIn document upload)
Resize slides for other platforms if needed

Rules

First slide = hook/title with brand identity
Last slide = CTA with brand logo and contact info
Max text per slide: 40 words (LinkedIn) | 25 words (Instagram)
All slides use brand fonts and colors from brand-config.json
Slide dimensions: 1080x1080 default (configurable per brand)

Scripts Used

render_carousel.py — Playwright HTML→PNG rendering

Timeout & Fallback

Per-slide render: 15-second timeout. If Playwright hangs, retry without custom fonts.
Full carousel: 3-minute timeout for 10 slides.
If Playwright unavailable: flag for manual rendering, save populated HTML for export.

render-carousels— agent skill

Is render-carousels safe to install?

/socialforge:render-carousels — Carousel Renderer

Supported Templates

Process

Rules

Scripts Used

Timeout & Fallback

Audit the pieces. Scan the whole. Decide.