capybara-skill
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate automation templates for the Ruby ecosystem and adheres to industry-standard testing practices. No malicious behaviors such as persistence, obfuscation, or unauthorized data exfiltration were detected.
- [EXTERNAL_DOWNLOADS]: The skill integrates with external testing infrastructure and standard package registries.
- Cloud Hub: The skill references
https://hub.lambdatest.com/wd/hub, which is the official Selenium Grid endpoint for the skill author's platform. Analysis confirms this is a legitimate service domain. - Package Dependencies: The
reference/playbook.mdfile correctly identifies standard, well-known testing gems includingcapybara,selenium-webdriver,rspec,site_prism,capybara-screenshot,factory_bot,database_cleaner-active_record,webmock, andvcr. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to manage credentials via environment variables (
LT_USERNAME,LT_ACCESS_KEY) instead of hardcoding sensitive information into the testing scripts. This is evidenced in bothSKILL.mdandreference/cloud-integration.md.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata