capybara-skill

Fail

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides legitimate automation templates for the Ruby ecosystem and adheres to industry-standard testing practices. No malicious behaviors such as persistence, obfuscation, or unauthorized data exfiltration were detected.
  • [EXTERNAL_DOWNLOADS]: The skill integrates with external testing infrastructure and standard package registries.
  • Cloud Hub: The skill references https://hub.lambdatest.com/wd/hub, which is the official Selenium Grid endpoint for the skill author's platform. Analysis confirms this is a legitimate service domain.
  • Package Dependencies: The reference/playbook.md file correctly identifies standard, well-known testing gems including capybara, selenium-webdriver, rspec, site_prism, capybara-screenshot, factory_bot, database_cleaner-active_record, webmock, and vcr.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to manage credentials via environment variables (LT_USERNAME, LT_ACCESS_KEY) instead of hardcoding sensitive information into the testing scripts. This is evidenced in both SKILL.md and reference/cloud-integration.md.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 17, 2026, 09:35 PM