web-testing-visual-regression
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and promotes security best practices, such as secret management (using secrets for API tokens) and deterministic testing environments to prevent false positives and insecure testing habits.
- [EXTERNAL_DOWNLOADS]: The skill references official and well-known resources including Microsoft's Playwright Docker images and standard GitHub Actions. These are trusted sources in the context of the skill's purpose.
- [REMOTE_CODE_EXECUTION]: Instructions involve standard execution of testing frameworks (Playwright, Chromatic) via package managers (npx). No untrusted or unknown third-party scripts are executed.
- [DATA_EXFILTRATION]: There is no evidence of sensitive data access or unauthorized exfiltration. The skill focuses on capturing UI screenshots for comparison within a controlled testing pipeline.
- [DYNAMIC_EXECUTION]: The skill demonstrates pinning
Math.randomfor determinism via an init script. This is a standard testing technique for eliminating randomness in UI renders and does not constitute a security risk.
Audit Metadata