configure-load-tests
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill employs the
!command`` syntax inSKILL.mdto execute diagnostic shell commands (e.g.,pwd,find,k6 version) at load time. These commands are used solely to populate the agent's context with information about the project's directory structure, existing test files, and installed tool versions. - [EXTERNAL_DOWNLOADS]: The configuration templates in
REFERENCE.mdreference external JavaScript modules fromjslib.k6.io(official k6 library) andgithub.com/benc-uk/k6-reporter(a well-known community reporting tool). These are standard dependencies within the k6 ecosystem. - [PRIVILEGE_ESCALATION]: The installation instructions provided in
REFERENCE.mdinclude the use ofsudofor adding package repositories and installing the k6 binary on Linux systems. This is the standard and expected procedure for system-level package management. - [INDIRECT_PROMPT_INJECTION]: The skill performs audits by reading project-specific files such as
package.json, CI workflows, and existing load test scripts. This activity is restricted to discovery and reporting on configuration compliance and does not involve the execution of untrusted content found within those files.
Audit Metadata