k6-load-testing
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloads for k6 binaries and GitHub Actions from well-known services.
- Fetches the k6 package and repository configurations from the official
dl.k6.iodomain. - Retrieves GPG signing keys from
keyserver.ubuntu.com. - Utilizes official GitHub Actions from the Grafana organization (
grafana/k6-action). - [COMMAND_EXECUTION]: The instructions include standard shell commands for software lifecycle management and execution.
- Provides installation commands for macOS (
brew), Windows (choco), and Linux (apt-get). - Instructs the user on executing local test scripts using the
k6 runcommand. - [PRIVILEGE_ESCALATION]: Uses administrative privileges for standard system configuration tasks during installation.
- Employs
sudoto modify the system's package sources and install software on Linux distributions. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing data from external or local sources, creating a potential ingestion surface for untrusted data.
- Demonstrates reading local data files using the
open()function for parameterized testing. - Processes responses from external HTTP and WebSocket endpoints to validate performance metrics and functional behavior.
Audit Metadata