data-seeding-fixtures-builder
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEDYNAMIC_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes a hardcoded password string 'password123' within the E2E test fixture example in
SKILL.md. While intended for testing, hardcoding credentials is a security risk. - Evidence:
await page.fill('[name="password"]', "password123");intests/fixtures/e2e.fixture.tssection. - [DYNAMIC_EXECUTION]: The database reset script uses
prisma.$executeRawUnsafeto truncate tables based on values retrieved from the database schema. Using unsafe raw execution methods can lead to SQL injection vulnerabilities if the metadata source is compromised or contains unexpected identifiers. - Evidence:
await prisma.$executeRawUnsafe(TRUNCATE TABLE "${tablename}" CASCADE;);inscripts/reset-db.tssection.
Audit Metadata