contract-testing
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains educational and instructional content focused on contract testing methodologies and Pact.js implementation.
- [SAFE]: All shell commands provided (e.g.,
npm install,npx pact-broker) are standard for the domain and do not involve suspicious execution patterns. - [SAFE]: The skill demonstrates secure configuration practices by using environment variable placeholders (e.g.,
${PACT_BROKER_PASSWORD},${{ secrets.PACT_BROKER_TOKEN }}) for sensitive credentials instead of hardcoding them. - [SAFE]: External references, such as Docker images (
pactfoundation/pact-broker,postgres) and GitHub Actions (actions/checkout,actions/setup-node), are to well-known and reputable sources.
Audit Metadata