skills/vm0-ai/vm0-skills/browserstack/Gen Agent Trust Hub

browserstack

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official BrowserStack domains (api.browserstack.com, api-cloud.browserstack.com, and www.browserstack.com) which are well-known services for testing infrastructure.
  • [SAFE]: Sensitive credentials (username and access key) are handled via environment variables (BROWSERSTACK_USERNAME, BROWSERSTACK_ACCESS_KEY) rather than being hardcoded, following security best practices.
  • [SAFE]: All operations (fetching builds, uploading apps, updating session status) use standard command-line tools like curl and jq to perform documented API actions consistent with the skill's stated purpose.
  • [SAFE]: File operations are restricted to temporary paths (e.g., /tmp/browserstack_request.json, /tmp/session_video.mp4) or user-provided application paths for legitimate testing workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 04:41 AM
Security Audit — agent-trust-hub — browserstack