smartui-skill
Fail
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: CRITICAL
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
@lambdatest/smartui-clipackage from the official npm registry, which is the standard tool for the service described. - [COMMAND_EXECUTION]: Provides standard CLI execution patterns using
npx smartui, which is expected for a testing automation skill. It includes commands for creating configurations, executing tests, and running Storybook integrations. - [CREDENTIALS_SAFE]: Demonstrates secure credential handling by instructing users to set sensitive information like
PROJECT_TOKEN,LT_USERNAME, andLT_ACCESS_KEYin environment variables rather than hardcoding them in scripts. - [DATA_EXFILTRATION]: The skill communicates with
https://hub.lambdatest.com/wd/hubandhttps://smartui.lambdatest.com. These are legitimate endpoints for the LambdaTest cloud service required for visual regression testing and do not constitute malicious data exfiltration. - [REMOTE_CODE_EXECUTION]: While the skill executes local test scripts via
npx smartui exec, this is the primary purpose of the tool and is performed on the user's local code as part of a standard development workflow.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata