frontend-lighthouse

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing @lhci/cli as a dev dependency, which is the official and standard command-line interface for Google's Lighthouse CI tool.
  • [EXTERNAL_DOWNLOADS]: The provided GitHub Actions workflow references well-known and official actions including actions/checkout, actions/setup-node, actions/upload-artifact, and pnpm/action-setup for environment orchestration.
  • [COMMAND_EXECUTION]: The skill defines local command execution patterns (e.g., pnpm start, pnpm build, pnpm lhci) within the lighthouserc.cjs configuration and CI workflow, which are necessary and standard for building and auditing the application's production output.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data access were detected. The skill follows best practices for performance monitoring and CI/CD security.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 08:15 AM