setup-visual-regression
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Refers to the official Playwright Docker image (
mcr.microsoft.com/playwright) from Microsoft's public registry to ensure a consistent environment for baseline generation. - [EXTERNAL_DOWNLOADS]: Mentions the installation of standard industry-standard dependencies such as
@playwright/test,chromatic, andmswvia public registries. - [INDIRECT_PROMPT_INJECTION]: Incorporates security measures to handle untrusted or dynamic data by requiring the masking of volatile UI elements and the use of network mocking (MSW) to prevent non-deterministic behavior during visual analysis.
- [SAFE]: The skill follows established industry security guardrails (OWASP ASI) and focuses on the legitimate configuration of development tools without introducing malicious patterns.
Audit Metadata