replica
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of command execution patterns confirms that the skill only runs local Node.js scripts for image comparison and standard utilities for environment setup (npm) and serving local prototypes (python3). All operations are restricted to the local project context.
- [SAFE]: Dependency management is confined to installing well-known, trusted packages (playwright, pixelmatch, pngjs) from official registries for automated testing and image processing.
- [SAFE]: The skill manages data within the designated project directory (stardust/) and does not attempt to access sensitive system paths, environment variables, or hardcoded credentials.
- [SAFE]: Network operations are limited to browser-based navigation of user-provided URLs for visual analysis and CSS extraction. There is no evidence of unauthorized background data exfiltration.
- [SAFE]: The instructional content is focused on technical migration workflows and contains no patterns of prompt injection, safety bypasses, or adversarial overrides.
Audit Metadata