testing
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines standard software development practices for testing an application, including utilities for mocking and environment configuration.- [COMMAND_EXECUTION]: The skill provides instructions for executing tests via
pnpm, managing GitHub workflows via theghCLI, and running local shell scripts (./scripts/run-e2e-local.sh) for E2E flows. These are standard operations for developers and do not involve suspicious command injection patterns.- [EXTERNAL_DOWNLOADS]: The skill references and downloads artifacts from the vendor's repository (inbox-zero/inbox-zero-e2e) using the GitHub CLI (gh run download). These resources belong to the official project infrastructure.- [CREDENTIALS_UNSAFE]: The skill mentions configuration paths like~/.config/inbox-zero/.env.e2efor local setup. This is consistent with standard development practices for managing local environment variables and does not involve hardcoded secrets or exfiltration.
Audit Metadata