mobile-verification
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Playwright (via Node.js) to automate browser interactions. It executes standard commands to install Playwright and run the verification script. These commands are localized to the testing workflow and do not involve privilege escalation or suspicious targets.
- [EXTERNAL_DOWNLOADS]: The instructions include downloading Playwright and its Chromium binary (
npm i playwright && npx playwright install chromium). These are official packages from a well-known service (Microsoft/NPM) and are necessary for the skill's primary function of high-fidelity browser testing. - [REMOTE_CODE_EXECUTION]: While the script automates browser interactions on a user-provided URL, the execution is scoped to the browser context managed by Playwright. There is no evidence of remote script execution or arbitrary command injection into the host system.
- [DATA_EXFILTRATION]: The skill captures screenshots and console logs for testing purposes. These are stored locally or output to the console for the user's review. No network operations were found that exfiltrate data to unauthorized third-party servers.
Audit Metadata