k6-load-testing
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the
Bashtool to execute standardk6commands for load testing. This usage is consistent with the skill's stated purpose and is limited to performance benchmarking operations. - [SAFE]: The skill promotes secure credential management by explicitly instructing users to read authentication tokens from environment variables (
__ENV.TOKEN) rather than hardcoding them within test scripts. - [SAFE]: The skill processes local files such as
summary.jsonandtest-results.jsonto provide performance feedback, which constitutes a potential indirect prompt injection surface. This behavior is inherent to the skill's function as a test reporter. - Ingestion points: Reads
summary.json,test-results.json, and local JavaScript scripts. - Boundary markers: None explicitly defined for isolating tool output from agent instructions.
- Capability inventory: Accesses
Bashfor command execution andWebFetchfor network requests. - Sanitization: No specific sanitization of JSON result data is mentioned before processing.
Audit Metadata