browser-to-api
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely offline on local trace data, with no network exfiltration or remote code execution patterns detected.
- [SAFE]: Implements a dedicated redaction module in
scripts/lib/redact.mjsthat automatically scrubs authorization headers, cookies, passwords, JWTs, email addresses, and phone numbers from the generated OpenAPI specifications and samples. - [SAFE]: Uses an HTML escaping utility (
escHtmlinscripts/emit.mjs) to sanitize captured network data before including it in the generated visual report, mitigating risks of Cross-Site Scripting (XSS). - [SAFE]: All scripts utilize only the Node.js standard library, avoiding supply chain risks associated with third-party dependencies.
Audit Metadata