newman-cicd-integration
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template generator designed to assist users in setting up API testing workflows. No malicious patterns, obfuscation, or unauthorized access attempts were detected.
- [COMMAND_EXECUTION]: The skill provides templates containing standard package installation and testing commands such as
npm installandnewman run. These commands are specific to the skill's primary purpose and are intended for use within the user's controlled CI/CD environments. - [EXTERNAL_DOWNLOADS]: The generated configurations reference official GitHub Actions from the
actionsorganization and well-known third-party actions for test reporting. These are industry-standard components for automated pipelines. - [CREDENTIALS_UNSAFE]: The skill demonstrates positive security posture by explicitly instructing users to store sensitive data like API keys in CI/CD secrets (e.g., GitHub Secrets, GitLab Variables) rather than hardcoding them in configuration files.
Audit Metadata