perses-plugin-test
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute development and testing commands, including
percli,npm test, anddocker. These commands are appropriate for the skill's stated purpose of plugin engineering and follow standard developer workflows. - [EXTERNAL_DOWNLOADS]: The skill initiates a Docker container using the
persesdev/persesimage from Docker Hub. This is the official image for the Perses project and is used here for setting up a local integration testing environment. - [DATA_EXFILTRATION]: The skill includes a 'FORBIDDEN Pattern' that explicitly prohibits running integration tests against non-localhost URLs. This is a security-conscious design choice to ensure that testing activities remain isolated and do not expose data to external or production servers.
- [CREDENTIALS_UNSAFE]: The documentation mentions a login command in its error handling table as a suggestion for users troubleshooting authentication issues. It does not contain any hardcoded secrets or instructions for the agent to harvest credentials.
Audit Metadata