web-e2e
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands specified in the local
.e2e/config.jsonfile for application orchestration, such as booting the environment (boot.up) and performing process checks (checks[].cmd). These are executed viaspawnSyncin thescripts/e2e.cjsutility.- [EXTERNAL_DOWNLOADS]: The skill requires theagent-browserpackage from the official NPM registry. The documentation specifies a pinned version (0.27.2) to ensure a consistent and verified execution environment.- [INDIRECT_PROMPT_INJECTION]: As a tool designed to interact with live web content, the skill acknowledges the risk of processing untrusted data. TheSKILL.mdprovides explicit instructions to treat all scraped content as data rather than instructions and requires user confirmation for actions triggered by web data.- [CREDENTIALS_SAFE]: The documentation adheres to security best practices by recommending environment variables or specialized tools likegopassfor credential management, rather than hardcoding sensitive information in the configuration files.
Audit Metadata