smartui-skill

Fail

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: CRITICAL
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the @lambdatest/smartui-cli package from the official npm registry, which is the standard tool for the service described.
  • [COMMAND_EXECUTION]: Provides standard CLI execution patterns using npx smartui, which is expected for a testing automation skill. It includes commands for creating configurations, executing tests, and running Storybook integrations.
  • [CREDENTIALS_SAFE]: Demonstrates secure credential handling by instructing users to set sensitive information like PROJECT_TOKEN, LT_USERNAME, and LT_ACCESS_KEY in environment variables rather than hardcoding them in scripts.
  • [DATA_EXFILTRATION]: The skill communicates with https://hub.lambdatest.com/wd/hub and https://smartui.lambdatest.com. These are legitimate endpoints for the LambdaTest cloud service required for visual regression testing and do not constitute malicious data exfiltration.
  • [REMOTE_CODE_EXECUTION]: While the skill executes local test scripts via npx smartui exec, this is the primary purpose of the tool and is performed on the user's local code as part of a standard development workflow.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 27, 2026, 06:17 AM