third-party-integration-test
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes explicit instructions for secrets management and PII scrubbing, advising users to remove
api_key,secret,token, andlivemode: truefrom fixtures before committing them to a repository. - [SAFE]: It emphasizes the importance of testing security boundaries, specifically webhook signature verification, to ensure handlers reject tampered or unsigned payloads.
- [SAFE]: The guidance for S3/object storage testing includes verifying security-relevant metadata such as
ServerSideEncryptionto ensure proper data protection is implemented. - [SAFE]: The skill uses mock examples and placeholders which are standard for documentation and do not represent a credential exposure or exfiltration risk.
- [SAFE]: The skill provides defensive coding practices by encouraging tests for rate limiting, timeouts, and structured error handling, which improves the resilience of the target application.
Audit Metadata