webapp-ui-skill
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Node.js scripts (scripts/check_state_coverage.ts and scripts/visual_smoke_test.mjs) to perform project analysis and connectivity tests. These scripts are purpose-built for UI auditing.\n- [EXTERNAL_DOWNLOADS]: The scripts/visual_smoke_test.mjs utility uses the fetch API to verify the availability of a target URL. This network operation is part of the skill's documented verification workflow.\n- [DATA_EXFILTRATION]: While the skill reads project source files, it mitigates exfiltration risks by using a strict file-extension whitelist (.ts, .js, .tsx, .jsx, .vue, .svelte, .html, .css) and processing data locally to generate reports. It does not transmit the content of scanned files to external services.
Audit Metadata