oro-k6-testing
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard documentation for running k6 via Docker and installing it on various operating systems. The commands include necessary configurations like
--network hostand volume mounting to ensure the test runner can reach the application under test and save results locally.- [EXTERNAL_DOWNLOADS]: Installation instructions point to official and reputable package repositories, including Grafana's APT source atdl.k6.ioand the officialgrafana/k6Docker image. These are well-known and trusted sources for the testing tool.- [REMOTE_CODE_EXECUTION]: The documentation identifies that thek6-reportermodule is fetched from GitHub at runtime to generate HTML summaries. This is a common and established pattern within the k6 community for reporting functionality.- [CREDENTIALS_UNSAFE]: The skill correctly advises users to pass sensitive authentication credentials (like usernames and passwords) through environment variables when running the Docker container, which is a standard security practice to avoid hardcoding secrets in scripts.
Audit Metadata