testing-strategy

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation, templates, and scripts to establish a robust testing environment. All external tool references (Vitest, pytest, Playwright, Doppler, faker) and CI configurations are industry-standard practices.
  • [COMMAND_EXECUTION]: The skill uses Bash to run standard test commands (e.g., bun run test, pytest). The scripts/run_tests.py and scripts/coverage_check.py utilities use subprocess.run to execute these testing tools. This is the intended primary purpose of a testing strategy skill and is implemented using standard patterns.
  • [DATA_EXPOSURE]: The skill explicitly advises against hardcoding secrets and mandates the use of Doppler for environment variable management, which is a security best practice for handling sensitive data like DATABASE_URL or STRIPE_SECRET_KEY during testing.
  • [EXTERNAL_DOWNLOADS]: The skill references standard installation commands for well-known tools like the Doppler CLI (brew install dopplerhq/cli/doppler). These are references to official, trusted vendor sources and do not involve untrusted remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 08:45 AM
Security Audit — agent-trust-hub — testing-strategy