visual-testing
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill operates primarily through the
mmCLI tool, which allows the agent to launch headless browsers, navigate URLs, and simulate user interactions like clicking and typing. - [COMMAND_EXECUTION]: Advanced functionality is provided via the
mm cdpcommand, which enables the execution of JavaScript directly within the browser context using the Chrome DevTools Protocol. This is documented for use in inspecting React Fiber trees and performing Redux state manipulation. - [EXTERNAL_DOWNLOADS]: The documentation references standard Node.js package management workflows, such as
yarn installandnpx mm, for setting up the local testing environment and executing the CLI. - [SAFE]: Hardcoded credentials mentioned in the documentation, such as the password 'correct horse battery staple', are identified as part of the default test fixtures for local development and do not represent leaked production secrets.
Audit Metadata