puppeteer-skill
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code for browser automation, scraping, and PDF generation using the standard Puppeteer library.- [CREDENTIALS_UNSAFE]: The skill demonstrates secure practices by referencing environment variables (
process.env.LT_USERNAME,process.env.LT_ACCESS_KEY) for cloud integration. Example scripts contain placeholder credentials (e.g., 'password123', 'user@test.com') for demonstration purposes only.- [EXTERNAL_DOWNLOADS]: The skill references resources and connection endpoints belonging to LambdaTest, a well-known service for browser testing, specifically pointing to their official GitHub repository and CDP cloud endpoint.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator that ingests user instructions to produce automation scripts. While it does not implement explicit boundary markers or sanitization for these inputs, the generated scripts are intended for developer use and are governed by the skill's documented limitations which require user verification before execution.
Audit Metadata