e2e-testing

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses industry-standard tools for end-to-end testing, specifically Playwright. Commands such as npx playwright test are appropriate for the skill's stated purpose of automating UI tests.
  • [SAFE]: Secret management instructions correctly advise against hardcoding API keys, recommending the use of environment variables (process.env.OPENAI_API_KEY), which is a secure and standard practice.
  • [SAFE]: The inclusion of adversarial patterns like <script>alert(1)</script> is explicitly contextualized as guidance for the AI to generate tests that verify the application's input validation and security boundaries, not as an injection against the agent itself.
  • [SAFE]: Custom fixtures and helper functions are located within the local project directory structure (e.g., src/frontend/tests/utils/) and do not involve downloading or executing code from untrusted external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:18 PM
Security Audit — agent-trust-hub — e2e-testing