The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill demonstrates secure development practices by retrieving sensitive information such as TEST_USER_PASSWORD from environment variables (process.env) rather than hardcoding credentials directly into scripts.
[EXTERNAL_DOWNLOADS]: References and utilizes well-known, industry-standard packages and tools including Playwright (by Microsoft), Zod, and AJV. These dependencies are sourced from official registries and are standard for professional API automation workflows.
[COMMAND_EXECUTION]: Provides instructions for executing schemathesis, a recognized open-source tool for property-based API testing. This is used legitimately to fuzz endpoints and identify potential 500 errors or specification deviations.
[DYNAMIC_EXECUTION]: Uses AJV to compile JSON schemas at runtime. This is the standard and recommended method for high-performance response validation and does not involve executing untrusted arbitrary code.
[DATA_EXPOSURE]: Implements a local HTTP server for webhook testing that listens on a dynamically assigned port (server.listen(0)). This isolated setup is a safe and standard pattern for verifying asynchronous event delivery during local development or CI testing.

api-testing