flaky-selector-scan

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to audit E2E test suites for flaky patterns like absolute XPaths or hard-coded waits. It performs read-only static analysis on source code and does not execute the files it processes.- [DATA_EXPOSURE]: The skill accesses test-specific directories such as cypress/ and e2e/. This access is necessary for its stated function and does not involve sensitive system configuration or credential files.- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for ingesting untrusted data by reading test files.
  • Ingestion points: Local files matching glob patterns *.spec.*, *.test.*, *.cy.*, and *.robot in directories like cypress/, e2e/, or tests/ (SKILL.md).
  • Boundary markers: Absent.
  • Capability inventory: File reading and pattern matching; no subprocess execution, dynamic code evaluation, or network operations are implemented.
  • Sanitization: Absent. Because the skill only generates a report and lacks dangerous execution or exfiltration capabilities, the risk from malicious content in scanned files is minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 09:54 AM
Security Audit — agent-trust-hub — flaky-selector-scan