contract-testing-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for implementing contract testing using industry-standard tools.
- [SAFE]: CI integration examples correctly utilize GitHub Secrets for handling sensitive credentials, preventing credential exposure.
- [SAFE]: File system operations are limited to reading local configuration and schema files for validation purposes.
- [SAFE]: The node packages referenced (@pact-foundation/pact, ajv, js-yaml, express-openapi-validator) are well-known, legitimate libraries for testing and validation.
- [SAFE]: Mock data used in examples (e.g., Bearer token123) is clearly for demonstration and does not represent an actual credential leak.
Audit Metadata