k6-perf-test-website

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill scaffolds and uses several shell scripts (run-all.sh, run-with-monitor.sh, lg-monitor.sh) to orchestrate load tests and monitor system resources. These scripts utilize common system utilities such as ps, pgrep, top, netstat, and awk to gather performance metrics. This behavior is transparently documented and aligned with the skill's purpose of identifying load generator bottlenecks.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard package managers (npm) to install performance testing dependencies like har-to-k6 and playwright. It also imports helper libraries from https://jslib.k6.io/, which is the official repository for k6 extensions and utilities. These are recognized as well-known and trusted services within the development ecosystem.
  • [SAFE]: The skill implements and advocates for security best practices. Specifically, it includes detailed instructions for filtering out third-party RUM, ads, and analytics traffic from HAR recordings to prevent data bloat and accidental exposure. Furthermore, it explicitly instructs users to avoid hardcoding production credentials, suggesting the use of environment variables or dedicated test accounts instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 04:45 PM
Security Audit — agent-trust-hub — k6-perf-test-website