web-testing-visual-regression

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents standard practices for visual regression testing, including configuration of Playwright and integration with Chromatic.
  • [EXTERNAL_DOWNLOADS]: Fetches the official Playwright container image from Microsoft's container registry (mcr.microsoft.com) to ensure consistent rendering between local and CI environments. This is a secure practice using a trusted source.
  • [COMMAND_EXECUTION]: Employs standard CLI tools such as npx playwright and npx chromatic for executing tests and uploading snapshots.
  • [CREDENTIALS_UNSAFE]: Demonstrates proper secret management by referencing environment variables and GitHub Secrets (e.g., secrets.CHROMATIC_PROJECT_TOKEN) in automated workflows rather than hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 07:37 AM
Security Audit — agent-trust-hub — web-testing-visual-regression