lettuce-skill

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for users to install necessary dependencies using pip install lettuce selenium and to execute tests via the lettuce command-line utility.
  • [CREDENTIALS_UNSAFE]: The skill documentation describes the use of LT_USERNAME and LT_ACCESS_KEY environment variables for authentication. It provides configuration examples for connecting to the official vendor Selenium hub at hub.lambdatest.com using these credentials.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing standard Python packages (lettuce, selenium, requests, webdriver-manager) from the official public package registry.
  • [INDIRECT_PROMPT_INJECTION]: \n- Ingestion points: The migration utility in reference/playbook.md reads and processes content from local Python files specified by the user via command-line arguments. \n- Boundary markers: The utility does not use specific delimiters or 'ignore' instructions for the file content it processes. \n- Capability inventory: The script performs file system read and write operations and uses regex-based string manipulation for content transformation. The skill is designed to generate BDD test code and features based on user input. \n- Sanitization: Input content is transformed directly via string replacement without additional sanitization, which is standard for local code transformation utilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:35 PM