api-testing
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses author-provided CLI tools,
ironbee-browser-devtools-cliandironbee-node-devtools-cli, to perform browser automation and backend process debugging. These operations are within the scope of the skill's intended functionality. - [DATA_EXFILTRATION]: The skill facilitates monitoring of network traffic and extraction of page content. While this allows access to potentially sensitive information such as authentication headers, the behavior is local to the testing session and no unauthorized external data transmission patterns were found.
- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting external data from web pages and API responses.
- Ingestion points:
ironbee-browser-devtools-cli content get-as-textandironbee-browser-devtools-cli o11y get-http-requestsas shown inSKILL.md. - Boundary markers: None specified in the instructions.
- Capability inventory: Shell command execution via
Bashtool (specifically restricted to the vendor's devtools CLI). - Sanitization: No explicit sanitization or filtering of external input is described.
Audit Metadata