Skip to main content

htmlcsstoimage

Generates images from HTML/CSS or captures web page screenshots using the HTMLCSStoImage API.

Install this skill

or
0/100

Security score

The htmlcsstoimage skill was audited on Feb 12, 2026 and we found 49 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 81

Template literal with variable interpolation in command context

SourceSKILL.md
81```bash
medium line 114

Template literal with variable interpolation in command context

SourceSKILL.md
114```bash
medium line 138

Template literal with variable interpolation in command context

SourceSKILL.md
138```bash
medium line 156

Template literal with variable interpolation in command context

SourceSKILL.md
156```bash
medium line 172

Template literal with variable interpolation in command context

SourceSKILL.md
172```bash
medium line 184

Template literal with variable interpolation in command context

SourceSKILL.md
184```bash
medium line 204

Template literal with variable interpolation in command context

SourceSKILL.md
204```bash
medium line 216

Template literal with variable interpolation in command context

SourceSKILL.md
216```bash
medium line 228

Template literal with variable interpolation in command context

SourceSKILL.md
228```bash
medium line 238

Template literal with variable interpolation in command context

SourceSKILL.md
238```bash
medium line 256

Template literal with variable interpolation in command context

SourceSKILL.md
256```bash
medium line 280

Template literal with variable interpolation in command context

SourceSKILL.md
280```bash
high line 56

Curl to non-GitHub URL

SourceSKILL.md
56> bash -c 'curl -s "https://api.example.com" -H "Authorization: Bearer $API_KEY"'
medium line 82

Curl to non-GitHub URL

SourceSKILL.md
82bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"'
medium line 115

Curl to non-GitHub URL

SourceSKILL.md
115bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" --data-urlencode "css@/tmp/hcti_css.txt"'
medium line 139

Curl to non-GitHub URL

SourceSKILL.md
139bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" --data-urlencode "css@/tmp/hcti_css.txt" -d "google_fonts=Playfair D
medium line 157

Curl to non-GitHub URL

SourceSKILL.md
157bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt"'
medium line 173

Curl to non-GitHub URL

SourceSKILL.md
173bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "ms_delay=1500"'
medium line 185

Curl to non-GitHub URL

SourceSKILL.md
185bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "selector=h1"'
medium line 205

Curl to non-GitHub URL

SourceSKILL.md
205bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" -d "device_scale=2"'
medium line 217

Curl to non-GitHub URL

SourceSKILL.md
217bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "viewport_width=1200" -d "viewport_height=630"'
medium line 229

Curl to non-GitHub URL

SourceSKILL.md
229bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "full_screen=true"'
medium line 239

Curl to non-GitHub URL

SourceSKILL.md
239bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "block_consent_banners=true"'
medium line 257

Curl to non-GitHub URL

SourceSKILL.md
257bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"' | jq -r '.url'
medium line 263

Curl to non-GitHub URL

SourceSKILL.md
263curl -s "https://hcti.io/v1/image/<your-image-id>?dl=1" --output image.png
medium line 281

Curl to non-GitHub URL

SourceSKILL.md
281bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"' | jq -r '.url'
low line 31

External URL reference

SourceSKILL.md
311. Sign up at [HTMLCSStoImage](https://htmlcsstoimage.com/) and create an account
low line 32

External URL reference

SourceSKILL.md
322. Go to your [Dashboard](https://htmlcsstoimage.com/dashboard) to get your User ID and API Key
low line 56

External URL reference

SourceSKILL.md
56> bash -c 'curl -s "https://api.example.com" -H "Authorization: Bearer $API_KEY"'
low line 65

External URL reference

SourceSKILL.md
65- `https://hcti.io/v1/image`
low line 82

External URL reference

SourceSKILL.md
82bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"'
low line 88

External URL reference

SourceSKILL.md
88"url": "https://hcti.io/v1/image/abc123..."
low line 115

External URL reference

SourceSKILL.md
115bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" --data-urlencode "css@/tmp/hcti_css.txt"'
low line 139

External URL reference

SourceSKILL.md
139bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" --data-urlencode "css@/tmp/hcti_css.txt" -d "google_fonts=Playfair D
low line 153

External URL reference

SourceSKILL.md
153https://example.com
low line 157

External URL reference

SourceSKILL.md
157bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt"'
low line 169

External URL reference

SourceSKILL.md
169https://example.com
low line 173

External URL reference

SourceSKILL.md
173bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "ms_delay=1500"'
low line 185

External URL reference

SourceSKILL.md
185bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "selector=h1"'
low line 205

External URL reference

SourceSKILL.md
205bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt" -d "device_scale=2"'
low line 217

External URL reference

SourceSKILL.md
217bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "viewport_width=1200" -d "viewport_height=630"'
low line 229

External URL reference

SourceSKILL.md
229bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "full_screen=true"'
low line 239

External URL reference

SourceSKILL.md
239bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "url@/tmp/hcti_url.txt" -d "block_consent_banners=true"'
low line 257

External URL reference

SourceSKILL.md
257bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"' | jq -r '.url'
low line 263

External URL reference

SourceSKILL.md
263curl -s "https://hcti.io/v1/image/<your-image-id>?dl=1" --output image.png
low line 281

External URL reference

SourceSKILL.md
281bash -c 'curl -s "https://hcti.io/v1/image" -X POST -u "${HCTI_USER_ID}:${HCTI_API_KEY}" --data-urlencode "html@/tmp/hcti_html.txt"' | jq -r '.url'
low line 287

External URL reference

SourceSKILL.md
287Original: https://hcti.io/v1/image/<your-image-id>
low line 288

External URL reference

SourceSKILL.md
288Thumbnail: https://hcti.io/v1/image/<your-image-id>?width=200&height=200
low line 298

External URL reference

SourceSKILL.md
298"url": "https://hcti.io/v1/image/be4c5118-fe19-462b-a49e-48cf72697a9d"
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →