platform-testing
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for framework-agnostic testing principles.
- [CREDENTIALS_UNSAFE]: The skill includes a sample docker-compose configuration for a test database with a hardcoded password ('test'). This is a standard pattern for local, ephemeral testing environments and does not represent a credential leak for production systems.
- [EXTERNAL_DOWNLOADS]: The skill references a well-known container image ('postgres:16') for a test database and an external service ('api.resend.com') as an example of an API boundary to mock. These are well-known services used appropriately within the context of testing guidance.
- [INDIRECT_PROMPT_INJECTION]: As a coding assistant skill that processes user requests for test generation, it inherently has an ingestion surface for potentially untrusted code. However, the skill includes clear structural boundaries (AAA pattern, isolated test data) and focuses on behavior-driven testing, which provides typical defensive structure against accidental obedience to instructions embedded in code.
Audit Metadata