web-qa-bot

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes node:child_process.execSync to run external command-line utilities. Specifically, it executes the agent-browser CLI to perform browser actions (navigation, snapshots, clicks) and the ai-pdf-builder tool to convert test results into PDF reports.
  • [EXTERNAL_DOWNLOADS]: The skill identifies agent-browser as a peer dependency and programmatically executes npx ai-pdf-builder, both of which are retrieved from the npm registry at runtime or during installation.
  • [REMOTE_CODE_EXECUTION]: Through the Browser.evaluate method, the skill can execute arbitrary JavaScript within the context of the web page being tested. This is a standard and expected feature for web automation and QA tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 02:19 AM