aws-device-farm-migration-skill
Fail
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloading the HyperExecute CLI from
downloads.lambdatest.com. This is the official distribution domain for the vendor's automation tools. - [COMMAND_EXECUTION]: A Python script
scripts/detect.pyis provided to scan the local repository for test fingerprints. The script performs read-only operations and does not exfiltrate data or execute remote commands. - [CREDENTIALS_UNSAFE]: The skill manages authentication using
LT_USERNAMEandLT_ACCESS_KEY. It explicitly instructs the agent and user to use environment variables and CI/CD secrets for credential storage, adhering to secure secret management practices. - [SAFE]: Automated scanner alerts regarding the vendor's Selenium hub (
hub.lambdatest.com) were evaluated. This endpoint is a core component of the LambdaTest platform and its inclusion is legitimate for the skill's purpose of migrating test execution to that grid.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata