cypress-skill

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined requirements to generate Cypress test scripts. These scripts have the capability to perform network requests, file interactions, and environment variable access. Malicious instructions embedded in the user prompt could influence the generated code to perform unauthorized actions.
  • Ingestion points: User test automation requests processed in SKILL.md.
  • Boundary markers: None identified in the provided instructions.
  • Capability inventory: Includes file writing, shell command execution (via npx), and network interaction (cy.visit, cy.request).
  • Sanitization: No explicit validation or escaping of user-provided content is defined.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for utilizing the lambdatest-cypress CLI tool, which involves the retrieval and execution of external packages from the well-known LambdaTest cloud testing service. These operations are aligned with the skill's primary purpose.
  • [COMMAND_EXECUTION]: The skill guides the agent to execute shell commands such as npx cypress open, npx cypress run, and npx lambdatest-cypress run to manage test workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 01:17 PM
Security Audit — agent-trust-hub — cypress-skill