end-to-end-testing
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running E2E test suites using standard package manager scripts (e.g.,
npm run test:e2e) and runner-specific commands (e.g.,npx playwright test). These commands are essential for the skill's primary purpose of verifying a running application build. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly advises against hardcoding credentials, recommending the use of environment variables instead. It also mandates a 'Deterministic by Default' approach for automated suites to prevent dependencies on live third-party services, which reduces the risk of accidental data leakage.
- [DYNAMIC_EXECUTION]: The skill includes example code for managing a local server's lifecycle via
node:child_process.spawn. This is a standard and necessary procedure for E2E testing environments to ensure a system is available for the test runner. - [REMOTE_CODE_EXECUTION]: No suspicious remote code execution patterns or unverified external script downloads were found. All referenced tools (Playwright, Cypress, Maestro, etc.) are well-known industry standards for testing.
Audit Metadata