k6-perf-test-website
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill scaffolds a project that depends on
playwrightandhar-to-k6. It also instructs the user to download the Chromium browser vianpx playwright install chromium. These downloads are from well-known and trusted technology providers and are necessary for the skill's intended browser-based performance testing. - [REMOTE_CODE_EXECUTION]: k6 scripts in the provided templates import utility functions from
https://jslib.k6.io/. This domain is the official repository for k6 extensions and libraries maintained by Grafana, and the specific libraries imported (k6-utils,k6-testing) are standard, well-maintained resources for the k6 ecosystem. - [COMMAND_EXECUTION]: The skill includes shell scripts (
run-all.sh,lg-monitor.sh,run-with-monitor.sh) that use common system utilities (top,ps,pgrep,awk,netstat) to monitor local resource usage during load tests. These scripts are transparent, perform localized monitoring, and do not execute arbitrary commands or interact with sensitive system files. - [SAFE]: The skill's instructions consistently prioritize security, including explicit documentation on sanitizing recordings to remove sensitive session data and using environment variables for credentials rather than hardcoding them.
Audit Metadata