typo3-testing

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Build/Scripts/runTests.sh, a robust orchestration script used to manage Docker/Podman containers. It automates the lifecycle of testing environments, including database services (MariaDB, MySQL, Postgres) and test execution for unit, functional, and E2E suites.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official Docker images for TYPO3 core testing from ghcr.io/typo3/ and standard library images from Docker Hub. It also references the Composer installer from the well-known getcomposer.org domain.
  • [DYNAMIC_EXECUTION]: The references/framework-compat-gate.md section contains a bash script that programmatically generates a temporary Composer project and executes PHP code to verify class autoloading and framework version compatibility.
  • [CREDENTIALS_UNSAFE]: Hardcoded Argon2i password hashes and a 64-character hex encryption key are present in assets/fixtures/be_users.csv and assets/github-actions-e2e.yml. These are explicitly documented as synthetic fixtures for automated testing (e.g., using the password 'password' for test users) and do not represent a credential leak.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 09:27 AM