harmony-testing
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill promotes security best practices by instructing developers on how to prevent prototype pollution in save files and how to test for XSS vulnerabilities using specifically crafted 'hostile' inputs.
- [COMMAND_EXECUTION]: Includes reference code for a local HTTP server and a PeerJS signaling server. Both implementations correctly bind to the loopback interface (127.0.0.1), preventing exposure to the local network or the internet.
- [EXTERNAL_DOWNLOADS]: Recommends standard, well-known development dependencies such as Playwright and JSDOM. It also references a vendor-provided testing utility (@playharmony/sdk/testing) for simulating SDK behavior locally.
Audit Metadata