update-browser-support
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a specialized maintenance utility for the Storybook project, recomputing browser support floors from project-specific analytics data.
- [EXTERNAL_DOWNLOADS]: Fetches data from Plausible's official API (plausible.io), which is a well-known analytics service used for tracking project usage. This connection is used for data retrieval only.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data (visitor statistics) that influences the generated code and documentation. This potential attack surface is appropriately mitigated by explicit instructions requiring human-in-the-loop review and approval of the heuristic results before any files are modified.
- [COMMAND_EXECUTION]: Instructions include standard maintenance operations such as updating specific project files and bumping legitimate development dependencies like caniuse-lite when necessary.
- [CREDENTIALS_UNSAFE]: The skill properly handles the PLAUSIBLE_API_KEY by instructing the operator to provide it via the environment and explicitly forbidding the agent from printing the key.
Audit Metadata