cloud-grid-e2e
Fail
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: CRITICALCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages sensitive authentication credentials (usernames and access keys) for well-known cloud providers. It utilizes environment variables for credential management, following standard security practices for secret handling.
- [EXTERNAL_DOWNLOADS]: The documentation references downloading tunnel binaries, such as BrowserStackLocal, Sauce Connect, and LambdaTest Tunnel, from their respective well-known service providers to enable testing of local or internal applications.
- [COMMAND_EXECUTION]: The skill provides examples for executing local tunnel binaries to establish secure connections with cloud-based browser grids.
- [INDIRECT_PROMPT_INJECTION]: The skill presents a potential attack surface by interacting with external web applications during the testing process.
- Ingestion points: Web application content loaded and processed via WebDriver commands in
SKILL.mdand vendor reference files. - Boundary markers: None present.
- Capability inventory: Includes execution of local binaries (tunnels) and network requests to cloud grid provider hubs.
- Sanitization: No explicit sanitization or filtering of external application content is mentioned.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata