The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides templates for integration testing that utilize execSync or execFileSync to invoke the aio (Adobe I/O) CLI. This is a standard and necessary function for testing deployed App Builder actions. The templates specifically recommend using execFileSync with an arguments array to prevent shell injection, indicating a security-first approach.
[DYNAMIC_EXECUTION]: The skill scaffolds Jest-based tests which involve dynamic execution for mocking and assertions. This behavior is expected and primary to the skill's purpose as a testing utility.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it reads project source code (actions and UI components) to generate corresponding tests. This is a low-risk vector inherent to automated testing tools, and the skill is intended for use in developer environments on known codebases.
[CREDENTIALS_SAFE]: The skill includes a verification checklist that explicitly instructs users to avoid hardcoding credentials (e.g., Bearer tokens) in test files. It provides comprehensive mock helpers for Adobe SDKs (State, Files, Events) to ensure unit tests can run without real credentials or network access.

appbuilder-testing