cypress-flake-fixer

Pass

Audited by Gen Agent Trust Hub on Oct 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local maintenance script (scripts/scan-cypress.mjs) and utilizes npx for running test suites. These operations are restricted to the local environment and are consistent with the skill's primary purpose of auditing test code.
  • [EXTERNAL_DOWNLOADS]: The workflow suggests using npx to run Cypress, which may trigger downloads from the official npm registry. This targets a well-known package registry and is a standard part of the Node.js development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external test code files for analysis. While these files represent an untrusted input surface, the skill limits the agent's actions to specific heuristic pattern matching and guided code transformations based on established rules, which mitigates the risk of the agent obeying instructions embedded within the test code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 25, 2026, 09:33 AM