configure-ux-testing
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!command`` syntax inSKILL.mdto perform environment discovery during skill load. Evidence includes: !find . -maxdepth 1 ...`` for project structure discovery.!grep -l '@playwright/test' package.json`` for dependency checking.- These operations are used for legitimate project discovery and do not involve sensitive path access or unsanitized user input injection.
- [COMMAND_EXECUTION]: The skill executes a local shell script
configure-ux-testing.shfor deeper environment analysis. The script uses standard utilities (find,jq,grep) to audit the project's testing posture. All operations are local and perform read-only auditing. - [SAFE]: The skill references well-known and trusted technology providers for its operations:
- Downloads and dependencies target official registries and domains (e.g.,
playwright.dev,npmjs.com,@playwright/test,@axe-core/playwright). - GitHub Actions configurations use official/well-known actions (
actions/checkout,oven-sh/setup-bun). - All external URLs and package names were verified against common patterns and show no signs of typosquatting or impersonation.
Audit Metadata