agent-host-e2e-tests
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- Handling of Authentication Tokens: The skill instructs developers to use
GITHUB_TOKENor the GitHub CLI (gh auth token) when recording new test fixtures. This is a standard requirement for integration tests that must authenticate with external services. The skill does not hardcode any credentials and explicitly guides the user to manage them through environment variables or official CLI tools. - Data Redaction and Privacy Review: A significant portion of the workflow is dedicated to reviewing generated test artifacts (YAML fixtures) for potential leaks of sensitive information such as local usernames, absolute file paths, or authentication tokens. It provides instructions on using normalization and redaction tools within the codebase to ensure that captured traffic is sanitized before being committed to the repository.
- Execution of Local Development Scripts: The skill utilizes local scripts, such as
./scripts/test-integration.sh, to execute the test suites. These scripts are internal to the development environment and are used to orchestrate the integration testing process, including environment configuration and test filtering. - Cross-Platform Validation Procedures: The instructions include a requirement for validation via specific Azure Pipelines definitions. This ensures that new tests are verified in a controlled, multi-platform CI environment (Windows, Linux, macOS) before they are merged, which helps maintain the integrity of the build process.
Audit Metadata