lettuce-skill
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for users to install necessary dependencies using
pip install lettuce seleniumand to execute tests via thelettucecommand-line utility. - [CREDENTIALS_UNSAFE]: The skill documentation describes the use of
LT_USERNAMEandLT_ACCESS_KEYenvironment variables for authentication. It provides configuration examples for connecting to the official vendor Selenium hub athub.lambdatest.comusing these credentials. - [EXTERNAL_DOWNLOADS]: The skill recommends installing standard Python packages (
lettuce,selenium,requests,webdriver-manager) from the official public package registry. - [INDIRECT_PROMPT_INJECTION]: \n- Ingestion points: The migration utility in
reference/playbook.mdreads and processes content from local Python files specified by the user via command-line arguments. \n- Boundary markers: The utility does not use specific delimiters or 'ignore' instructions for the file content it processes. \n- Capability inventory: The script performs file system read and write operations and uses regex-based string manipulation for content transformation. The skill is designed to generate BDD test code and features based on user input. \n- Sanitization: Input content is transformed directly via string replacement without additional sanitization, which is standard for local code transformation utilities.
Audit Metadata