nemojs-skill
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install several standard Node.js packages from the official npm registry, including
nemo,nemo-view,nemo-drivex, andnemo-mocha-factory. These are established libraries within the Nemo.js automation framework. - [EXTERNAL_DOWNLOADS]: References the LambdaTest Selenium hub (
https://hub.lambdatest.com/wd/hub) for cloud-based test execution. While flagged by an automated scanner, this is the official endpoint for the vendor's testing infrastructure and is consistent with the skill's stated purpose of providing cloud integration. - [COMMAND_EXECUTION]: Provides standard command-line instructions for running tests using
npx mocha. These commands utilize environment variables (e.g.,NEMO_PROFILE) for configuration, which is a common practice in automated testing environments. - [CREDENTIALS_UNSAFE]: The skill correctly recommends managing sensitive credentials, such as
LT_USERNAMEandLT_ACCESS_KEY, through environment variables rather than hardcoding them in scripts or configuration files, following security best practices.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata