webarchive — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited webarchive (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The user wants to extract a .webarchive file using WebArchiveExtractor.
If arguments were provided ($ARGUMENTS), use them to infer the input file and optionally the output directory or URL prepend. Otherwise, ask the user for the path to the .webarchive file.
/Applications/WebArchiveExtractor.app/Contents/MacOS/WebArchiveExtractor [-h] [-o <OutputDirectory>] [-p <URLPrepend>] -i <WebArchiveFile>Options:
-i <WebArchiveFile> — required — path to the .webarchive file-o <OutputDirectory> — directory to write extracted files into (optional; defaults to a directory named after the archive next to it)-p <URLPrepend> — URI prefix to prepend to all asset URLs in the extracted HTML (optional; useful when serving the result from a subdirectory)Shorthand (no flag):
WebArchiveExtractor website.webarchiveA positional argument is treated as the -i value.
The app must be installed at /Applications/WebArchiveExtractor.app. Check with:
test -x /Applications/WebArchiveExtractor.app/Contents/MacOS/WebArchiveExtractor && echo "found" || echo "not installed"If not found, tell the user to build and install from source (xcodebuild -project WebArchiveExtractor.xcodeproj) or drag a release build to /Applications.
To use WebArchiveExtractor without the full path, the user can add it to PATH:
export PATH="$PATH:/Applications/WebArchiveExtractor.app/Contents/MacOS/"Or create a symlink:
ln -s /Applications/WebArchiveExtractor.app/Contents/MacOS/WebArchiveExtractor ~/.local/bin/WebArchiveExtractor.webarchive file from $ARGUMENTS or ask the user.$ARGUMENTS, use that.~/Downloads/<archive-name> (where <archive-name> is the input filename without the .webarchive extension).~/Downloads is the default, explain: macOS sandboxes the WebArchiveExtractor app, which restricts which directories the CLI can write to. The ~/Downloads folder is one of the few locations reliably accessible, so it's used as the default to avoid silent failures.$ARGUMENTS or ask if needed. /Applications/WebArchiveExtractor.app/Contents/MacOS/WebArchiveExtractor -i "<input>" -o "<output>" [-p "<prepend>"]ls and summarise:open <file>..webarchive is a macOS-specific binary plist format used by Safari's "Save As Web Archive" feature.-i suppresses the GUI.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.