test-automation-framework
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill documentation and reference files include several hardcoded secrets and credentials that should not be present in production-ready code. While likely intended for demonstration or testing purposes, hardcoding credentials in framework boilerplate is a security risk.
- Evidence includes:
- In
references/configuration-management.md, thedevelopmentconfiguration object hardcodes a test user email and password (devpass123). - In
references/page-object-model-playwrighttypescript.md, a test case hardcodes a credit card number (4242424242424242), CVC (123), and a user password (password123) in the checkout flow example. - In
references/pytest-framework-python.mdandreferences/test-fixtures-and-factories.md, the passwordpassword123is hardcoded within fixture definitions and test logic.
Recommendations
- AI detected serious security threats
Audit Metadata