visual-regression

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a set of guidelines for visual regression testing. It describes a logical workflow for identifying layout shifts and visual bugs between two versions of a website using standard image comparison tools.
  • [COMMAND_EXECUTION]: While the skill mentions using @playwright/test and provides a JavaScript example for image diffing, these are standard practices for the intended testing purpose. The code uses fs.readFileSync for local file access to read images but does not demonstrate arbitrary command execution or use of untrusted inputs in sensitive operations.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted Node.js packages such as pixelmatch, pngjs, and @playwright/test. These are standard tools in the web automation and testing ecosystem and are used here according to their intended design.
  • [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The skill operates on local screenshot directories created by the visual-snapshot tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 03:53 AM
Security Audit — agent-trust-hub — visual-regression