ui-test-webdriverio

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill primarily consists of documentation, prompts, and sample test configurations designed to assist in WebdriverIO test planning. Analysis of all provided scripts and prompts found no evidence of malicious behavior.- [EXTERNAL_DOWNLOADS]: The skill utilizes npx wdio within its execution scripts (scripts/run-tests.sh) and evaluation fixtures. This is a standard Node.js mechanism for running the WebdriverIO test runner by fetching it from the official npm registry, which is a well-known and trusted service.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided project context (such as scope and environment details) to generate test plans. This represents a potential surface for indirect prompt injection; however, the skill provides robust domain-specific procedures and oracles to guide the agent in generating valid, isolated, and maintainable test assets, minimizing the risk of adverse behavior from untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 01:47 AM