qa-visual-regression
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for visual regression testing workflows and explicitly enforces security best practices for process integrity, such as forbidding local baseline updates.- [COMMAND_EXECUTION]: While the skill permits the use of the Bash tool, the instructions are limited to standard, non-malicious QA operations. No arbitrary or dangerous command execution patterns were found.- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths (e.g., .ssh or .aws config), or data exfiltration attempts were identified.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from UI components and routes, but the potential for indirect prompt injection is mitigated by its narrow scope and lack of high-privilege capabilities.
Audit Metadata