The Agent Skills Directory

[SAFE]: The skill includes several orchestration and setup scripts (runTests.sh, setup-testing.sh, generate-test.sh) that use standard tools like Composer, Docker, and Podman to manage testing environments and dependencies. These scripts are used for legitimate automation of developer workflows.
[SAFE]: Synthetic secret fixtures provided in assets/fixtures/be_users.csv are explicitly documented for use in functional tests and utilize standard Argon2 password hashing. Guidance is provided to developers on how to use implode() or closures to avoid triggering security scanners with fake test secrets.
[SAFE]: Network operations found in the scripts (e.g., using curl or wget) target trusted or well-known domains like github.com and getcomposer.org for legitimate purposes such as environment validation and dependency installation. These are handled neutrally as part of standard CI/CD operations.
[SAFE]: The instruction set provides extensive technical guidance on avoiding common pitfalls in TYPO3 testing, including security-focused patterns for access control verification, cryptographic service testing, and memory-safe secret handling.
[SAFE]: No obfuscation, data exfiltration, or unauthorized privilege escalation attempts were detected. The skill author, netresearch, utilizes their own meta-packages and reusable workflows which is consistent with the vendor context.

typo3-testing