Puppeteer Visual Regression Testing
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated testing purpose is coherent, and there is no evidence of credential theft or exfiltration in the skill text, but the skill mainly functions as a transitive installer using an unpinned third-party CLI and includes at least one install command that does not match surfaced official docs. This is a medium supply-chain and trust-chain risk rather than confirmed malicious behavior.
Confidence: 90%Severity: 63%
Audit Metadata