currents-agent-skills
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure software development practices by repeatedly instructing users to manage sensitive information, specifically the
CURRENTS_RECORD_KEY, via environment variables rather than hardcoding them. - [SAFE]: All external downloads and installations reference well-known and official packages from the
@currentsorganization or standard testing tools (e.g.,cypress-cloud,newman,vitest). - [SAFE]: The use of an alternative Cypress binary mirror (
cy-cdn.currents.dev) is clearly documented as a workaround for specific framework version blocking and originates from the vendor's own infrastructure. - [SAFE]: File system operations are restricted to creating and overwriting markdown reports within a specific workspace directory (
./currents-reports/), which is a standard behavior for analysis skills. - [SAFE]: Command execution patterns provided in the setup guides are standard development workflows for installing dependencies and running test suites.
Audit Metadata