smoke-tests
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Hurl testing utility from its official GitHub releases. It explicitly recommends security best practices, including pinning the version and performing a SHA256 checksum verification before installation via
dpkg. - [COMMAND_EXECUTION]: The skill defines command-line patterns for running tests via
hurlandcurl. These are standard, legitimate operations for API testing and CI/CD gating. - [CREDENTIALS_UNSAFE]: The skill documentation includes extensive security warnings regarding secret management. It advises users to avoid passing passwords as CLI arguments, warns against verbose logging of sensitive tokens in CI, and demonstrates building JSON payloads with
jqto prevent injection attacks.
Audit Metadata