testing-strategy
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation, templates, and scripts to establish a robust testing environment. All external tool references (Vitest, pytest, Playwright, Doppler, faker) and CI configurations are industry-standard practices.
- [COMMAND_EXECUTION]: The skill uses
Bashto run standard test commands (e.g.,bun run test,pytest). Thescripts/run_tests.pyandscripts/coverage_check.pyutilities usesubprocess.runto execute these testing tools. This is the intended primary purpose of a testing strategy skill and is implemented using standard patterns. - [DATA_EXPOSURE]: The skill explicitly advises against hardcoding secrets and mandates the use of Doppler for environment variable management, which is a security best practice for handling sensitive data like
DATABASE_URLorSTRIPE_SECRET_KEYduring testing. - [EXTERNAL_DOWNLOADS]: The skill references standard installation commands for well-known tools like the Doppler CLI (
brew install dopplerhq/cli/doppler). These are references to official, trusted vendor sources and do not involve untrusted remote code execution.
Audit Metadata