migrate-selenium-java-to-codeceptjs

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate architectural and workflow guidance for porting test suites across languages and frameworks.
  • [COMMAND_EXECUTION]: The documentation includes standard development commands such as npx codeceptjs init, npm install, and docker run. These are used for initializing the project, installing well-known dependencies (like Playwright), and starting official Selenium standalone containers for local testing.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure handling of sensitive data by instructing the use of the secret() wrapper for passwords and tokens (e.g., I.fillField(..., secret(password))), which prevents credentials from appearing in logs or traces.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries and tools such as @faker-js/faker, Playwright, and Selenoid. These are established tools in the automated testing ecosystem and are used here for their intended purpose.
  • [DATA_EXPOSURE_EXFILTRATION]: Network operations mentioned, such as checking a local driver status via curl, are limited to local health checks (127.0.0.1) and do not involve exfiltrating data to external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:08 PM
Security Audit — agent-trust-hub — migrate-selenium-java-to-codeceptjs