browser-to-api
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for offline post-processing of local data. It reads browser-trace files (JSONL) and generates documentation (OpenAPI YAML/JSON, HTML, and Markdown) without performing any external network requests during its execution.
- [SAFE]: It implements a robust redaction system in
scripts/lib/redact.mjsthat automatically identifies and scrubs sensitive data, including credentials (authorization headers, API keys, cookies) and PII (JWTs, email addresses, phone numbers), before persisting them into samples or reports. - [SAFE]: The codebase adheres to a zero-dependency policy, utilizing only Node.js standard libraries (
node:fs,node:path,node:crypto). This significantly reduces the attack surface related to supply chain vulnerabilities or malicious third-party packages. - [SAFE]: All file operations are scoped to the provided run directory or an output directory, and the script uses standard path resolution to prevent traversal issues. No malicious command execution or privilege escalation patterns were detected.
Audit Metadata