dev-e2e-testing
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents legitimate development workflows for end-to-end testing, focusing on production-parity environments.
- [EXTERNAL_DOWNLOADS]: References official software images and tools from well-known organizations and registries, such as Shopify's Toxiproxy on the GitHub Container Registry (ghcr.io), and standard images for PostgreSQL, Valkey, Redpanda, and WireMock.
- [DYNAMIC_EXECUTION]: Recommends a technique for testing SDKs by generating minimal standalone programs and executing them as child processes to verify packaging and runtime compatibility.
- [INDIRECT_PROMPT_INJECTION]: The testing framework is designed to ingest and exercise external code (SDKs) and mock API responses; however, these operations are intended to be performed within isolated local or CI testing environments.
Audit Metadata