webapp-testing

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/with_server.py file uses subprocess.Popen with shell=True to launch local development servers as part of its core functionality. This is standard practice for developer tools that need to manage local processes and shell features like command chaining (&&).
  • [DATA_EXPOSURE]: The skill uses typical paths for automation outputs like /tmp/ and /mnt/user-data/outputs/ for screenshots and logs. This behavior is documented and appropriate for a testing utility.
  • [EXTERNAL_DOWNLOADS]: The skill does not download external code or dependencies at runtime; it relies on locally installed tools like Python and Playwright.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:45 AM
Security Audit — agent-trust-hub — webapp-testing