1k-ui-verify
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses
playwright-coreto connect to a locally running Electron application over the Chrome DevTools Protocol (CDP) at a standard local address (127.0.0.1:9222). This is a legitimate development workflow for UI testing. - [SAFE]: The skill integrates with
agent-device, an open-source tool from Callstack, a well-known organization in the React Native ecosystem, to automate mobile simulators. The references point to the official GitHub repository for this tool. - [SAFE]: No evidence of data exfiltration, credential harvesting, or unauthorized remote code execution was found. The network operations are limited to local services (CDP, Metro Bundler) or trusted official repositories.
- [SAFE]: Interaction with the file system is restricted to capturing screenshots and reading local configuration, which is consistent with the skill's stated purpose of UI verification.
Audit Metadata