test-automation-framework

Fail

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill documentation and reference files include several hardcoded secrets and credentials that should not be present in production-ready code. While likely intended for demonstration or testing purposes, hardcoding credentials in framework boilerplate is a security risk.
  • Evidence includes:
  • In references/configuration-management.md, the development configuration object hardcodes a test user email and password (devpass123).
  • In references/page-object-model-playwrighttypescript.md, a test case hardcodes a credit card number (4242424242424242), CVC (123), and a user password (password123) in the checkout flow example.
  • In references/pytest-framework-python.md and references/test-fixtures-and-factories.md, the password password123 is hardcoded within fixture definitions and test logic.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 10:45 AM
Security Audit — agent-trust-hub — test-automation-framework