visual-regression-tester

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill contains no malicious behavior, obfuscation, or unauthorized data access patterns. It follows best practices for secret management in CI by using GitHub Actions secrets for tokens.
  • [EXTERNAL_DOWNLOADS]: The skill fetches standard testing tools and browser binaries from well-known registries and official sources.
  • Evidence: Instructions to install @playwright/test and chromatic from NPM, and browsers via npx playwright install.
  • [COMMAND_EXECUTION]: Utilizes standard build and test commands within a CI environment.
  • Evidence: Includes shell commands for installing dependencies (npm ci), building the application, and executing tests (npx playwright test).
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to load and process web application content for visual verification.
  • Ingestion points: Test scripts use page.goto() to load web content for comparison.
  • Boundary markers: N/A
  • the tool is used for automated visual regression in controlled environments.
  • Capability inventory: Filesystem writes for test snapshots and generation of test reports.
  • Sanitization: N/A
  • standard visual diffing behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 02:56 PM
Security Audit — agent-trust-hub — visual-regression-tester