webapp-testing
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/with_server.pyfile usessubprocess.Popenwithshell=Trueto launch local development servers as part of its core functionality. This is standard practice for developer tools that need to manage local processes and shell features like command chaining (&&). - [DATA_EXPOSURE]: The skill uses typical paths for automation outputs like
/tmp/and/mnt/user-data/outputs/for screenshots and logs. This behavior is documented and appropriate for a testing utility. - [EXTERNAL_DOWNLOADS]: The skill does not download external code or dependencies at runtime; it relies on locally installed tools like Python and Playwright.
Audit Metadata