typo3-testing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
Build/Scripts/runTests.sh, a robust orchestration script used to manage Docker/Podman containers. It automates the lifecycle of testing environments, including database services (MariaDB, MySQL, Postgres) and test execution for unit, functional, and E2E suites. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official Docker images for TYPO3 core testing from
ghcr.io/typo3/and standard library images from Docker Hub. It also references the Composer installer from the well-knowngetcomposer.orgdomain. - [DYNAMIC_EXECUTION]: The
references/framework-compat-gate.mdsection contains a bash script that programmatically generates a temporary Composer project and executes PHP code to verify class autoloading and framework version compatibility. - [CREDENTIALS_UNSAFE]: Hardcoded Argon2i password hashes and a 64-character hex encryption key are present in
assets/fixtures/be_users.csvandassets/github-actions-e2e.yml. These are explicitly documented as synthetic fixtures for automated testing (e.g., using the password 'password' for test users) and do not represent a credential leak.
Audit Metadata