compliance-testing
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and structural guide for implementing compliance testing. All provided code snippets are standard Playwright/TypeScript patterns used for UI automation and network request monitoring.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known GitHub Actions (actions/checkout, actions/setup-node, actions/upload-artifact) and official package registries (npm) for environment setup. These are legitimate resources used for CI/CD integration.
- [COMMAND_EXECUTION]: The CI workflow includes commands like 'npm ci', 'npx playwright install', and 'npm start'. These are standard development operations for testing local applications in a sandboxed environment.
- [DATA_EXFILTRATION]: While the skill monitors network requests (e.g., to 'google-analytics.com'), it does so solely for the purpose of verifying that tracking scripts are blocked before user consent, which is a defensive compliance check. No outbound data transmission of sensitive information was found.
- [PROMPT_INJECTION]: The skill's instructions are instructional and context-aware, referencing a '.agents/qa-project-context.md' file to customize testing parameters. This is a standard practice for configuration-driven agents and does not involve bypassing safety filters.
Audit Metadata