k6-perf-test-website
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill scaffolds and uses several shell scripts (
run-all.sh,run-with-monitor.sh,lg-monitor.sh) to orchestrate load tests and monitor system resources. These scripts utilize common system utilities such asps,pgrep,top,netstat, andawkto gather performance metrics. This behavior is transparently documented and aligned with the skill's purpose of identifying load generator bottlenecks. - [EXTERNAL_DOWNLOADS]: The skill utilizes standard package managers (
npm) to install performance testing dependencies likehar-to-k6andplaywright. It also imports helper libraries fromhttps://jslib.k6.io/, which is the official repository for k6 extensions and utilities. These are recognized as well-known and trusted services within the development ecosystem. - [SAFE]: The skill implements and advocates for security best practices. Specifically, it includes detailed instructions for filtering out third-party RUM, ads, and analytics traffic from HAR recordings to prevent data bloat and accidental exposure. Furthermore, it explicitly instructs users to avoid hardcoding production credentials, suggesting the use of environment variables or dedicated test accounts instead.
Audit Metadata