Skills
Navigate
skills/naodeng/awesome-qa-skills/api-test-supertest/Gen Agent Trust Hub

api-test-supertest

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell scripts (scripts/run.sh) and CI configuration files (Jenkinsfile.supertest, github-actions-supertest.yml) that execute standard development commands such as npm install and npm test. These are standard practices for Node.js projects.
  • [EXTERNAL_DOWNLOADS]: The scripts/run.sh script executes npm install, which downloads dependencies from the official npm registry. The installation instructions in README.md use shell scripts to automate skill setup, which is common for developer tooling.
  • [CREDENTIALS_SAFE]: The skill instructions in SKILL.md and prompts/api-test-supertest.md explicitly forbid hardcoding sensitive information like API tokens or cookies. Instead, it mandates the use of environment variable placeholders (e.g., process.env.API_TOKEN), aligning with secure development practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes API definition files (OpenAPI, Postman, etc.) as untrusted data. However, the scripts/api_case_contract.py and scripts/generate_supertest_tests.py scripts perform validation and use structured templates to generate code, reducing the surface for prompt injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 11:23 AM