wpt-update
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- Standard Tool Execution: The skill utilizes project-specific maintenance scripts, build tools like Bazel, and Python formatting tools. These operations are standard and expected within the development environment for which this skill is designed.
- Interaction with Reputable Sources: The skill fetches dependency updates from official vendor repositories and references the well-known Web Platform Tests project on GitHub. These external references are consistent with the skill's primary purpose of dependency management.
- Indirect Prompt Injection Surface: The skill involves processing external data such as test logs and git diffs. While such data can theoretically be used for injection, the skill includes clear instructions on how to interpret these inputs and strictly limits the scope of allowed modifications to specific configuration files and patches, which acts as a protective boundary.
Audit Metadata