flaky-selector-scan
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to perform static analysis on UI test files (e.g., Playwright, Cypress, Selenium) to identify unstable CSS or XPath selectors.
- [DATA_EXPOSURE]: No sensitive file paths or credentials are accessed. The file access is scoped to development test files as per the intended workflow.
- [EXTERNAL_DOWNLOADS]: No external packages or remote scripts are downloaded or executed. The reference to qualitymax.io is a text-based attribution to the author's official domain.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (test code), it treats this data as text for extraction rather than instructions. The inherent risk is minimal and consistent with standard file-processing tools.
- Ingestion points: Reads
*.spec.ts,*.cy.js, and other test files. - Boundary markers: None explicitly defined in the instructions, though the workflow is constrained to locator extraction.
- Capability inventory: File read operations via standard agent tools.
- Sanitization: Not explicitly mentioned, but the output is structured reporting of selector patterns.
Audit Metadata