web-qa-bot
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
node:child_process.execSyncto run external command-line utilities. Specifically, it executes theagent-browserCLI to perform browser actions (navigation, snapshots, clicks) and theai-pdf-buildertool to convert test results into PDF reports. - [EXTERNAL_DOWNLOADS]: The skill identifies
agent-browseras a peer dependency and programmatically executesnpx ai-pdf-builder, both of which are retrieved from the npm registry at runtime or during installation. - [REMOTE_CODE_EXECUTION]: Through the
Browser.evaluatemethod, the skill can execute arbitrary JavaScript within the context of the web page being tested. This is a standard and expected feature for web automation and QA tools.
Audit Metadata