mobile-testing-maestro

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive patterns for mobile UI testing using Maestro, focusing on declarative YAML flows.
  • [SAFE]: Includes explicit security requirements for users to utilize environment variables or env blocks for credentials, prohibiting the hardcoding of secrets in version-controlled YAML files.
  • [COMMAND_EXECUTION]: The documentation describes the use of evalScript and runScript to execute JavaScript logic. These are standard, documented features of the Maestro framework used for computing dynamic values, managing test state, and coordinating multi-step logic.
  • [EXTERNAL_DOWNLOADS]: References official tools and services from the framework vendor, including maestro cloud and the mobile-dev-inc/action-maestro-cloud GitHub Action for CI/CD integration.
  • [DATA_EXFILTRATION]: Provides examples of using http.get and http.post within JavaScript scripts. These are intended for legitimate test-related activities such as API setup, teardown, and health checks during the E2E testing process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 02:34 AM
Security Audit — agent-trust-hub — mobile-testing-maestro