website-scorecard
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill facilitates automated website testing and reporting using industry-standard tools like Git and Playwright in a manner consistent with legitimate development workflows.
- [COMMAND_EXECUTION]: Subprocess calls for Git and Playwright are implemented using secure methods with argument arrays, which effectively prevents command injection vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The skill references Google PageSpeed Insights, a well-known service, for external performance audits via a standard web link; no automated remote code execution or suspicious downloads were found.
- [SAFE]: Analysis confirms the skill only accesses project configuration and file hashes to track changes, with no evidence of sensitive data access or exfiltration attempts.
Audit Metadata