security-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected across any of the analyzed files.
- Industry-Standard Tools: The skill references well-known, trusted security tooling such as Google's OSV-Scanner, Semgrep, TruffleHog, and OWASP ZAP.
- Negative Path Testing: The included security testing vectors (e.g., local file path strings like
/etc/passwdor AWS metadata endpoints like169.254.169.254) are standard test payloads wrapped in Playwright automated test blocks intended to check application resistance against SSRF and access control bypasses. - Local Command Safety: Uses a secure, static
execSynccommand to perform a lockfile drift check (npm ci --dry-run) during the CI build process, presenting no risks of command injection or untrusted execution.
Audit Metadata