The Agent Skills Directory

[SAFE]: The skill manages sensitive information, such as authentication tokens, using environment variable interpolation (e.g., ${env:API_TOKEN}) within its configuration files, adhering to industry best practices for secret management.
[SAFE]: External dependencies and tools are fetched from official and trusted vendor infrastructure, such as the PactFlow download domain and standard registries like npm for the @pactflow/drift and @stoplight/prism-cli packages.
[SAFE]: The included Python utilities (extract_endpoints.py and check_coverage.py) use safe parsing methods (e.g., yaml.safe_load) and perform specific, well-defined analysis of OpenAPI documents without exhibiting suspicious behavior or exfiltrating data.
[SAFE]: The Lua 5.4 scripting environment is a documented and intended feature for managing test lifecycle events (setup and teardown), enabling users to programmatically control test state through standard HTTP interactions and environment access.
[SAFE]: While the skill ingests external data in the form of OpenAPI specifications, it is a developer-centric tool for testing its own infrastructure. The parsing logic includes sanitization for operation identifiers to prevent path traversal or command injection risks during the generation of test stubs.

drift-testing