plugin-test
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's scripts automate the installation of
pnpmand@deepseek-ai/dshfrom the official npm registry to configure the containerized test environment. - [COMMAND_EXECUTION]: The skill includes Node.js utilities that execute test commands using
child_process.spawnwithshell: false. These operations are intended to be run in isolated Docker containers. - [CREDENTIALS_UNSAFE]: The skill implements a redaction mechanism in
docker-release-smoke.mjsthat identifies and masks API keys, tokens, and passwords in test output logs to prevent accidental exposure of sensitive information.
Audit Metadata