frontend-lighthouse
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
@lhci/clias a dev dependency, which is the official and standard command-line interface for Google's Lighthouse CI tool. - [EXTERNAL_DOWNLOADS]: The provided GitHub Actions workflow references well-known and official actions including
actions/checkout,actions/setup-node,actions/upload-artifact, andpnpm/action-setupfor environment orchestration. - [COMMAND_EXECUTION]: The skill defines local command execution patterns (e.g.,
pnpm start,pnpm build,pnpm lhci) within thelighthouserc.cjsconfiguration and CI workflow, which are necessary and standard for building and auditing the application's production output. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data access were detected. The skill follows best practices for performance monitoring and CI/CD security.
Audit Metadata