testing-browser-compatibility

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a restricted Bash environment (test:browser-*) and instructs the agent to run standard testing commands such as 'npx playwright test'.
  • [EXTERNAL_DOWNLOADS]: The instructions include downloading browser binaries via 'npx playwright install'. This is performed through Microsoft's official channels, which is a well-known and trusted service.
  • [PROMPT_INJECTION]: The skill performs static analysis of the user's codebase using 'Grep' to identify modern JS and CSS features. While this represents an indirect ingestion point for untrusted data, it is central to the skill's primary purpose and no malicious patterns were identified. Ingestion points: codebase via Grep (SKILL.md). Boundary markers: none. Capability inventory: Bash, Write, Edit (SKILL.md). Sanitization: none.
  • [CREDENTIALS_UNSAFE]: The skill mentions the optional use of BrowserStack or Sauce Labs credentials for testing on real devices. No hardcoded credentials or unsafe exfiltration patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 11:09 AM