web-testing-cypress-e2e
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official GitHub Action for Cypress (
cypress-io/github-action) and established industry libraries such asaxe-coreandcypress-axe. These are trusted resources commonly used in professional software development for CI/CD and accessibility testing. - [COMMAND_EXECUTION]: The documentation includes patterns for using
cy.task(), which is a standard Cypress feature that allows the test runner to execute Node.js code. This is used appropriately in the provided examples for legitimate testing tasks such as database seeding and filesystem cleanup. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for interacting with external web content and APIs (via
cy.visitandcy.intercept). While these functions interact with external data that could theoretically contain malicious instructions, the skill demonstrates defensive best practices such as structural validation of API responses and explicit assertions on DOM state, which are standard for robust test automation.
Audit Metadata