e2e-testing
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses industry-standard tools for end-to-end testing, specifically Playwright. Commands such as
npx playwright testare appropriate for the skill's stated purpose of automating UI tests. - [SAFE]: Secret management instructions correctly advise against hardcoding API keys, recommending the use of environment variables (
process.env.OPENAI_API_KEY), which is a secure and standard practice. - [SAFE]: The inclusion of adversarial patterns like
<script>alert(1)</script>is explicitly contextualized as guidance for the AI to generate tests that verify the application's input validation and security boundaries, not as an injection against the agent itself. - [SAFE]: Custom fixtures and helper functions are located within the local project directory structure (e.g.,
src/frontend/tests/utils/) and do not involve downloading or executing code from untrusted external sources.
Audit Metadata