visual-regression
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION] (SAFE): No prompt injection patterns were detected in the documentation or instructions. The language used in examples describes standard operational behavior without attempting to override safety filters.- [DATA_EXFILTRATION] (SAFE): The script reads local files such as
.git/HEADandpackage.jsonto gather project metadata. It does not contain network calls (e.g., curl, requests) and no data is exfiltrated to external endpoints.- [COMMAND_EXECUTION] (SAFE): The script generates and modifies configuration files and adds scripts topackage.json. It does not execute any system commands via subprocess or os.system; execution of the generated scripts is left to the user.- [EXTERNAL_DOWNLOADS] (SAFE): The documentation suggests installing well-known industry packages (Chromatic, Percy) and provides GitHub Action templates from trusted sources (chromaui/action). The script itself does not perform any automated downloads.
Audit Metadata