hidden-verify
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Instructions guide the agent to perform local builds using
pnpm buildand execute a Node.js-based driver script. These actions are necessary for the skill's functionality and are restricted to the local project environment. - [DYNAMIC_EXECUTION]: The
driver.mjsscript utilizes the Chrome DevTools Protocol (CDP) to evaluate JavaScript expressions viaRuntime.evaluatewithin the application's renderer process. This is the intended mechanism for inspecting UI states and computed properties during verification. - [DATA_EXFILTRATION]: The skill proactively implements data isolation measures. It mandates the use of environment variables (e.g.,
APP_STATE_DIR) to redirect all application state, including cookies, local storage, and settings, to a temporary scratch directory. This prevents the verification process from accessing or leaking the user's primary application data.
Audit Metadata