chromatic-setup-ci
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves updated documentation and configuration templates from the official
chromatic.comdomain. This ensures that the generated pipeline configurations are up-to-date with the service's current requirements. - [COMMAND_EXECUTION]: The skill provides templates for running the
chromaticCLI tool across different environments and package managers (npm, yarn, pnpm, bun). These commands are intended for inclusion in CI configuration files generated for the user. - [DATA_EXFILTRATION]: The skill analyzes local project metadata, such as
package.jsonand existing CI configuration files (e.g.,.github/workflows/*.yml), to identify the project's tech stack. This data is used within the agent's context to customize the setup guidance. - [CREDENTIALS_UNSAFE]: The instructions include a safeguard requiring the agent to reference sensitive project tokens as environment variables or secrets, explicitly prohibiting the hardcoding of actual token values in generated configurations.
Audit Metadata