browserstack
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
browserstack-localpackage from the official npm registry and provides steps for manual installation of an MCP server integration. These are standard procedures for enabling the service's functionality. - [COMMAND_EXECUTION]: The skill executes
npx playwright testto trigger test runs and uses shell commands to set up the environment. These commands are expected for a testing integration and operate within the project's scope. - [CREDENTIALS_UNSAFE]: The skill correctly identifies the need for
BROWSERSTACK_USERNAMEandBROWSERSTACK_ACCESS_KEYenvironment variables. It provides instructions for the user to configure these securely in their environment rather than prompting for direct entry or hardcoding them in the skill content. - [DATA_EXFILTRATION]: While the skill configures a WebSocket endpoint (
wss://cdp.browserstack.com) that transmits credentials, this is the official integration method for the well-known BrowserStack service and is limited to the service's own infrastructure.
Audit Metadata