browserstack

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the browserstack-local package from the official npm registry and provides steps for manual installation of an MCP server integration. These are standard procedures for enabling the service's functionality.
  • [COMMAND_EXECUTION]: The skill executes npx playwright test to trigger test runs and uses shell commands to set up the environment. These commands are expected for a testing integration and operate within the project's scope.
  • [CREDENTIALS_UNSAFE]: The skill correctly identifies the need for BROWSERSTACK_USERNAME and BROWSERSTACK_ACCESS_KEY environment variables. It provides instructions for the user to configure these securely in their environment rather than prompting for direct entry or hardcoding them in the skill content.
  • [DATA_EXFILTRATION]: While the skill configures a WebSocket endpoint (wss://cdp.browserstack.com) that transmits credentials, this is the official integration method for the well-known BrowserStack service and is limited to the service's own infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:23 AM