visual-regression-tester
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no malicious behavior, obfuscation, or unauthorized data access patterns. It follows best practices for secret management in CI by using GitHub Actions secrets for tokens.
- [EXTERNAL_DOWNLOADS]: The skill fetches standard testing tools and browser binaries from well-known registries and official sources.
- Evidence: Instructions to install
@playwright/testandchromaticfrom NPM, and browsers vianpx playwright install. - [COMMAND_EXECUTION]: Utilizes standard build and test commands within a CI environment.
- Evidence: Includes shell commands for installing dependencies (
npm ci), building the application, and executing tests (npx playwright test). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to load and process web application content for visual verification.
- Ingestion points: Test scripts use
page.goto()to load web content for comparison. - Boundary markers: N/A
- the tool is used for automated visual regression in controlled environments.
- Capability inventory: Filesystem writes for test snapshots and generation of test reports.
- Sanitization: N/A
- standard visual diffing behavior.
Audit Metadata